Vista - Administrator required to run applications?

This is crazy. I am already a member of the administrators group in Vista.
So, why do I have to run certain applications as administrator?

Also, why does Windows Defender block some Windows programs such as System
Configuration Utility and Secure Update from running?

Hello,

In Windows Vista, even though you are an administrator, only the programs
that you give permission to (via a "Windows needs your permission to
continue" prompt) will be able to use your administrator powers.

Programs that do not need admin powers (such as the calculator) will not ask
for it and thus will not be able to do such things as format your hard
drive.

Really, why should <insert name of non-administrative program> be able to do
system administration tasks? That's just begging for trouble.

The benefits of this is:

1) Programs that do not need admin power, don't get it

2) You are aware of all programs that start with admin power and are able to
deny programs access to your admin power (for example, if
SeeTheDancingBears.exe request admin access to your computer, you can
disallow it).

All Windows Vista-compliant applications will automatically ask you for
permission when they want to do administrative tasks.

Legacy programs, or programs that generally don't need admin permission but
may need such permission in certain scenarios (such as using notepad to edit
the HOSTS file), you will need to explictly give them admin permission by
right-clicking them and clicking Run As Administrator.

To prevent a possible denial-of-service, programs that require
administrative privileges CANNOT automatically start up when you log in /
start your computer. Windows blocks these programs from running, instead of
showing a bunch of prompts on every login.

These programs should be updated to be Vista-compatible, if (or when) such
updates are available.



--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

I could live with the permission thing if I could at least get into my own
dam folders.

--
Carl G

"Jimmy Brush" <JimmyBrush@discussions.microsoft.com> wrote in message
news:87CE8782-43C6-4ABE-B16B-15B84C843394@microsoft.com...
> Hello,
>
> In Windows Vista, even though you are an administrator, only the programs
> that you give permission to (via a "Windows needs your permission to
> continue" prompt) will be able to use your administrator powers.
>
> Programs that do not need admin powers (such as the calculator) will not
> ask for it and thus will not be able to do such things as format your hard
> drive.
>
> Really, why should <insert name of non-administrative program> be able to
> do system administration tasks? That's just begging for trouble.
>
> The benefits of this is:
>
> 1) Programs that do not need admin power, don't get it
>
> 2) You are aware of all programs that start with admin power and are able
> to deny programs access to your admin power (for example, if
> SeeTheDancingBears.exe request admin access to your computer, you can
> disallow it).
>
> All Windows Vista-compliant applications will automatically ask you for
> permission when they want to do administrative tasks.
>
> Legacy programs, or programs that generally don't need admin permission
> but may need such permission in certain scenarios (such as using notepad
> to edit the HOSTS file), you will need to explictly give them admin
> permission by right-clicking them and clicking Run As Administrator.
>
> To prevent a possible denial-of-service, programs that require
> administrative privileges CANNOT automatically start up when you log in /
> start your computer. Windows blocks these programs from running, instead
> of showing a bunch of prompts on every login.
>
> These programs should be updated to be Vista-compatible, if (or when) such
> updates are available.
>
>
>
> --
> - JB
> Microsoft MVP - Windows Shell/User
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/

I agree with the other posters. This is NUTS! I was a very experienced XP
user and now I have no idea how to use my new computer! If Microsoft doesn't
fix the complexity of VISTA, the software will be a titanic failure, and
Apple stock will soar. I hope I am wrong but my bet is that the average user
will be very frustrated.



"Carl G" wrote:

> I could live with the permission thing if I could at least get into my own
> dam folders.
>
> --
> Carl G
>
> "Jimmy Brush" <JimmyBrush@discussions.microsoft.com> wrote in message
> news:87CE8782-43C6-4ABE-B16B-15B84C843394@microsoft.com...
> > Hello,
> >
> > In Windows Vista, even though you are an administrator, only the programs
> > that you give permission to (via a "Windows needs your permission to
> > continue" prompt) will be able to use your administrator powers.
> >
> > Programs that do not need admin powers (such as the calculator) will not
> > ask for it and thus will not be able to do such things as format your hard
> > drive.
> >
> > Really, why should <insert name of non-administrative program> be able to
> > do system administration tasks? That's just begging for trouble.
> >
> > The benefits of this is:
> >
> > 1) Programs that do not need admin power, don't get it
> >
> > 2) You are aware of all programs that start with admin power and are able
> > to deny programs access to your admin power (for example, if
> > SeeTheDancingBears.exe request admin access to your computer, you can
> > disallow it).
> >
> > All Windows Vista-compliant applications will automatically ask you for
> > permission when they want to do administrative tasks.
> >
> > Legacy programs, or programs that generally don't need admin permission
> > but may need such permission in certain scenarios (such as using notepad
> > to edit the HOSTS file), you will need to explictly give them admin
> > permission by right-clicking them and clicking Run As Administrator.
> >
> > To prevent a possible denial-of-service, programs that require
> > administrative privileges CANNOT automatically start up when you log in /
> > start your computer. Windows blocks these programs from running, instead
> > of showing a bunch of prompts on every login.
> >
> > These programs should be updated to be Vista-compatible, if (or when) such
> > updates are available.
> >
> >
> >
> > --
> > - JB
> > Microsoft MVP - Windows Shell/User
> >
> > Windows Vista Support Faq
> > http://www.jimmah.com/vista/
>
>

On Thu, 8 Feb 2007 19:11:58 -0500, Jimmy Brush wrote:

> Hello,
>
> In Windows Vista, even though you are an administrator, only the programs
> that you give permission to (via a "Windows needs your permission to
> continue" prompt) will be able to use your administrator powers.
>
> Programs that do not need admin powers (such as the calculator) will not ask
> for it and thus will not be able to do such things as format your hard
> drive.
>
> Really, why should <insert name of non-administrative program> be able to do
> system administration tasks? That's just begging for trouble.
>
> The benefits of this is:
>
> 1) Programs that do not need admin power, don't get it
>
> 2) You are aware of all programs that start with admin power and are able to
> deny programs access to your admin power (for example, if
> SeeTheDancingBears.exe request admin access to your computer, you can
> disallow it).
>
> All Windows Vista-compliant applications will automatically ask you for
> permission when they want to do administrative tasks.
>
> Legacy programs, or programs that generally don't need admin permission but
> may need such permission in certain scenarios (such as using notepad to edit
> the HOSTS file), you will need to explictly give them admin permission by
> right-clicking them and clicking Run As Administrator.
>
> To prevent a possible denial-of-service, programs that require
> administrative privileges CANNOT automatically start up when you log in /
> start your computer. Windows blocks these programs from running, instead of
> showing a bunch of prompts on every login.
>
> These programs should be updated to be Vista-compatible, if (or when) such
> updates are available.

In addition to what Jimmy has posted, there are other operating systems
that have historically required extra steps to perform a task at system
(root) level. Other operating systems may be a little more "smooth" about
it but it's the same concept.

In the long run, UAC works in your favor. I'll agree that it's a pain
getting through software and driver installs and certain "tweaks." But once
all is setup, UAC doesn't appear often at all.

A few of the applications that I use caused too many prompts when installed
under the protected "Program Files." Until Vista aware versions are
released for those titles, I've created a folder "OtherApps" and install
them there. Not as secure but, for now, but it eliminates the UAC prompts
these apps would have caused if installed elsewhere.

--
Sharon F
MS-MVP ~ Windows Shell/User

What folders are you having problems with?


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

Hi Jimmy
Why can't I open the temporary internet files folder under users , carl ,
local , temporary internet files.
What is so security risking about that folder.
There are lots of folders under local that have the shortcut arrow that are
not accesable,such as the documents folder.picture,music,video folders.Why
is that?they are my personal folders,why can't I get into them? I am the
adminestrator and the only user on this PC.
Just don't see all this security stuff. It is my computer,my instalation of
windows, if I want to destroy it ,that is my perogative I would think.
Thanks

--
Carl G

"Jimmy Brush" <JimmyBrush@discussions.microsoft.com> wrote in message
news:878666FE-2A05-40A1-8CF4-96106937CF30@microsoft.com...
> What folders are you having problems with?
>
>
> --
> - JB
> Microsoft MVP - Windows Shell/User
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/

Well,

The problem here is that those locations no longer exist in Windows Vista,
hence you can't access them.

Sure, you can still "see" some of the old locations, like you mentioned, if
you have turned on the showing of hidden / OS files.

But, these locations have been moved/renamed/replaced, and you need to learn
the new locations.

Technically, these things that you see that are transparent with a shortcut
symbol are called junctions, and they are there to make some misbehaving
programs work.

To see what these locations have been replaced by, you can use the command
prompt:

- Open a command prompt
- CD to the folder that contains the location that has moved
- Type: dir /al

It will list the old locations as '<JUNCTION>' or '<SYMLINKD>' and show
their new location in brackets.


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

Hi guys, I have a few problems around Vista which my PC vendor's team have
been unable to resolve. No Vista knowledge at all! Anyone offer any help pls?

1) Outloook 2000

Error message: "An error occurreed while attempting to open the Windows
Address Book. Unable to find the WAD DLL".

ADDITIONAL INFO: There is an address book which I imported from old XP PC
via Easy Transfer. I read somewhere that OE v6.0 checks WAB and detects
corrupt WAB whereas prior versions WAB did not detect corruption. Might this
be the problem? How I do a regenerate a new uncorrupted WAB? Aint OE v6
part of Vista OS so how do I do a partail reinstall? I cant even see the
Vista OS in Uninstall Programs List (was OEM though I get get a a CD copy
also).

2) UAC. All the Windows Vista guides talk about running 'secpol.msc' and
'gpedit.msc' to configure UAC. When I do a search apparently these files are
NOT found? They MUST exist, right as part of OS?

I think I cant see access/them due to Admin rights or something...though I
am an Administrator Account Type as opposed to a Std User. Anyone any ideas?




"Jimmy Brush" wrote:

> Well,
>
> The problem here is that those locations no longer exist in Windows Vista,
> hence you can't access them.
>
> Sure, you can still "see" some of the old locations, like you mentioned, if
> you have turned on the showing of hidden / OS files.
>
> But, these locations have been moved/renamed/replaced, and you need to learn
> the new locations.
>
> Technically, these things that you see that are transparent with a shortcut
> symbol are called junctions, and they are there to make some misbehaving
> programs work.
>
> To see what these locations have been replaced by, you can use the command
> prompt:
>
> - Open a command prompt
> - CD to the folder that contains the location that has moved
> - Type: dir /al
>
> It will list the old locations as '<JUNCTION>' or '<SYMLINKD>' and show
> their new location in brackets.
>
>
> --
> - JB
> Microsoft MVP - Windows Shell/User
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/
>

It's interesting that you are even running Outlook 2000 on the latest version
of Windows. That's like putting regular gasoline in a Ferrari. C'mon dude,
upgrade already; save yourself the unnecessary headache.

"Steve" wrote:

> Hi guys, I have a few problems around Vista which my PC vendor's team have
> been unable to resolve. No Vista knowledge at all! Anyone offer any help pls?
>
> 1) Outloook 2000
>
> Error message: "An error occurreed while attempting to open the Windows
> Address Book. Unable to find the WAD DLL".
>
> ADDITIONAL INFO: There is an address book which I imported from old XP PC
> via Easy Transfer. I read somewhere that OE v6.0 checks WAB and detects
> corrupt WAB whereas prior versions WAB did not detect corruption. Might this
> be the problem? How I do a regenerate a new uncorrupted WAB? Aint OE v6
> part of Vista OS so how do I do a partail reinstall? I cant even see the
> Vista OS in Uninstall Programs List (was OEM though I get get a a CD copy
> also).
>
> 2) UAC. All the Windows Vista guides talk about running 'secpol.msc' and
> 'gpedit.msc' to configure UAC. When I do a search apparently these files are
> NOT found? They MUST exist, right as part of OS?
>
> I think I cant see access/them due to Admin rights or something...though I
> am an Administrator Account Type as opposed to a Std User. Anyone any ideas?
>
>
>
>
> "Jimmy Brush" wrote:
>
> > Well,
> >
> > The problem here is that those locations no longer exist in Windows Vista,
> > hence you can't access them.
> >
> > Sure, you can still "see" some of the old locations, like you mentioned, if
> > you have turned on the showing of hidden / OS files.
> >
> > But, these locations have been moved/renamed/replaced, and you need to learn
> > the new locations.
> >
> > Technically, these things that you see that are transparent with a shortcut
> > symbol are called junctions, and they are there to make some misbehaving
> > programs work.
> >
> > To see what these locations have been replaced by, you can use the command
> > prompt:
> >
> > - Open a command prompt
> > - CD to the folder that contains the location that has moved
> > - Type: dir /al
> >
> > It will list the old locations as '<JUNCTION>' or '<SYMLINKD>' and show
> > their new location in brackets.
> >
> >
> > --
> > - JB
> > Microsoft MVP - Windows Shell/User
> >
> > Windows Vista Support Faq
> > http://www.jimmah.com/vista/
> >