User Account Control Issues

I am trying to configure User Access Control to allow me to run various
windows tools (like disk check and clean manager) from the command line (I
know that some of these are automatically run from scheduled tasks). I
cannot change their status using some of MS suggestions like right clicking
on the app, picking properties, and compatiblity as all of the options are
grayed out.

If I use Local Policies and Security Options, I can disable the messages,
but as soon as I reboot Windows Security Center tells me that that the User
Control Access is off (it does not show this before reboot).

Is this a bug? I'd like the avoid the GUI button message without Windows
Security Warnings.

Hello,

>I am trying to configure User Access Control to allow me to run various
> windows tools (like disk check and clean manager) from the command line

Right-click the link to command prompt, and then click Run As Administrator.
This is called 'elevating' an application.

When you manually elevate an application, you implicitly approve any tool
that is opened from that application to have admin privileges as well, and
so you will not get any more prompts while working with said application.

So, for example with the command prompt, when you elevate a command prompt,
you will be able to run any program from that command prompt without having
to deal with the permissions dialogs.

This allows you to run the applications you need to use in an administrative
context painlessly, while still keeping the rest of the system secure.

> (I know that some of these are automatically run from scheduled tasks).

Some tasks can be set up to run in the context of the system - these tasks
will not ask for permission.

> I
> cannot change their status using some of MS suggestions like right
> clicking
> on the app, picking properties, and compatiblity as all of the options are
> grayed out.

None of these options will allow you to disable the permissions dialog for a
single application. This is not possible.

> If I use Local Policies and Security Options, I can disable the messages,
> but as soon as I reboot Windows Security Center tells me that that the
> User
> Control Access is off (it does not show this before reboot).

Turning of User Account Control severely affects system security,
essentially disabling many of the new security enhancements of Windows
Vista. This is why you are warned when you turn it off.

> Is this a bug? I'd like the avoid the GUI button message without Windows
> Security Warnings.

This is not a bug.

- JB

Vista Support FAQ
http://www.jimmah.com/vista/

That's correct.

The warning message is there so that you have to explicitly authorize a
program to have administrator privileges.

This prevents programs from doing potentially bad things to your system
unless you give them permission to.

There is no way to have a program run with administrator privileges without
the user giving consent. You can only turn off the behavior for the entire
computer or class of user.

There is no way to allow specific programs to run with administrator
privileges without prompting. The reasoing for this is security. If such
functionality existed, malware could take advantage of programs that had
this run-without-prompting privilege, effectively defeating the whole
purpose of the security in the first place.

- JB

Vista Support FAQ
http://www.jimmah.com/vista/

Thanks for the reply...have tried the right click option to "run as
administrator"...but you have to do that every time I think....it's not a
permanent solution so that every time that task is run, you avoid the GUI
warning message...or at least that is the experience I'm having...

"Jimmy Brush" wrote:

> Hello,
>
> >I am trying to configure User Access Control to allow me to run various
> > windows tools (like disk check and clean manager) from the command line
>
> Right-click the link to command prompt, and then click Run As Administrator.
> This is called 'elevating' an application.
>
> When you manually elevate an application, you implicitly approve any tool
> that is opened from that application to have admin privileges as well, and
> so you will not get any more prompts while working with said application.
>
> So, for example with the command prompt, when you elevate a command prompt,
> you will be able to run any program from that command prompt without having
> to deal with the permissions dialogs.
>
> This allows you to run the applications you need to use in an administrative
> context painlessly, while still keeping the rest of the system secure.
>
> > (I know that some of these are automatically run from scheduled tasks).
>
> Some tasks can be set up to run in the context of the system - these tasks
> will not ask for permission.
>
> > I
> > cannot change their status using some of MS suggestions like right
> > clicking
> > on the app, picking properties, and compatiblity as all of the options are
> > grayed out.
>
> None of these options will allow you to disable the permissions dialog for a
> single application. This is not possible.
>
> > If I use Local Policies and Security Options, I can disable the messages,
> > but as soon as I reboot Windows Security Center tells me that that the
> > User
> > Control Access is off (it does not show this before reboot).
>
> Turning of User Account Control severely affects system security,
> essentially disabling many of the new security enhancements of Windows
> Vista. This is why you are warned when you turn it off.
>
> > Is this a bug? I'd like the avoid the GUI button message without Windows
> > Security Warnings.
>
> This is not a bug.
>
> - JB
>
> Vista Support FAQ
> http://www.jimmah.com/vista/
>

OK, thanks...but this seems like an enormous pain especially if you're
running the very programs that come with the OS...I'd prefer the ability to
create a "white list" that you can run without this message....appreciate the
help, though. Thanks.

"Jimmy Brush" wrote:

> That's correct.
>
> The warning message is there so that you have to explicitly authorize a
> program to have administrator privileges.
>
> This prevents programs from doing potentially bad things to your system
> unless you give them permission to.
>
> There is no way to have a program run with administrator privileges without
> the user giving consent. You can only turn off the behavior for the entire
> computer or class of user.
>
> There is no way to allow specific programs to run with administrator
> privileges without prompting. The reasoing for this is security. If such
> functionality existed, malware could take advantage of programs that had
> this run-without-prompting privilege, effectively defeating the whole
> purpose of the security in the first place.
>
> - JB
>
> Vista Support FAQ
> http://www.jimmah.com/vista/
>