Vista - UAC failed to ask for confirmation. Bug?

Running RC2 with default UAC settings and default filesystem ACLs, logged in
as an administrator, I pressed win+e to open windows explorer (thus explorer
was not run as administrator) and browsed to another user's home directory,
and read a file therein, and got no UAC confirmation prompt.
Wasn't I supposed to get a prompt?

I was just getting ready to post a similar bug. I'm running RC2, build 5744.

I'm sitting in a Vista developer class right now and learning about the
manifest that are required to make an exceutable elevate to
requireAdministrator when it starts up. I'm logged on as a local
administrator on my laptop. UAC is turned on. I open control panel and the
User Accounts. With UAC on, anything with a shield should prompt me to
elevate to the administrator token. I click on "Turn User Accounts On or
Off", which has a shield next to it. I'm not getting prompted.

I cycled UAC off and on (two reboots). On the second reboot, the Explorer
shell seemed to hang. Killed it in Task Manager and restarted it in Task
Manager.

I'm still not prompted by a Shield task even with UAC on. It is as if UAC
were not on.

Is anyone else having this problem?

Thanks,

Chuck

"Roof Fiddler" <fiddler@roof.com> wrote in message
news:%23rU7%23Nc%23GHA.4888@TK2MSFTNGP04.phx.gbl...
> Running RC2 with default UAC settings and default filesystem ACLs, logged
> in as an administrator, I pressed win+e to open windows explorer (thus
> explorer was not run as administrator) and browsed to another user's home
> directory, and read a file therein, and got no UAC confirmation prompt.
> Wasn't I supposed to get a prompt?
>

I cycled my OS one more time. I'm still not getting prompted for Shield icon
tasks with UAC turned on.

Why not? Is there some setting that causes the UAC prompting to turn off? I
don't think there should be. Obviously I've done it somehow. What gives?

Chuck

"Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
news:Ou6Agae%23GHA.4468@TK2MSFTNGP05.phx.gbl...
>I was just getting ready to post a similar bug. I'm running RC2, build
>5744.
>
> I'm sitting in a Vista developer class right now and learning about the
> manifest that are required to make an exceutable elevate to
> requireAdministrator when it starts up. I'm logged on as a local
> administrator on my laptop. UAC is turned on. I open control panel and the
> User Accounts. With UAC on, anything with a shield should prompt me to
> elevate to the administrator token. I click on "Turn User Accounts On or
> Off", which has a shield next to it. I'm not getting prompted.
>
> I cycled UAC off and on (two reboots). On the second reboot, the Explorer
> shell seemed to hang. Killed it in Task Manager and restarted it in Task
> Manager.
>
> I'm still not prompted by a Shield task even with UAC on. It is as if UAC
> were not on.
>
> Is anyone else having this problem?
>
> Thanks,
>
> Chuck
>
> "Roof Fiddler" <fiddler@roof.com> wrote in message
> news:%23rU7%23Nc%23GHA.4888@TK2MSFTNGP04.phx.gbl...
>> Running RC2 with default UAC settings and default filesystem ACLs, logged
>> in as an administrator, I pressed win+e to open windows explorer (thus
>> explorer was not run as administrator) and browsed to another user's home
>> directory, and read a file therein, and got no UAC confirmation prompt.
>> Wasn't I supposed to get a prompt?
>>
>

I figured out my problem. In Local Security Policy, I had "User Account
Control: Behavior of the elvation prompt for administrators in Admin
Approval Mode" set to "Elevate without prompt".

This was my problem. Check your Local Security policies under the the User
Account Control settings.

Chuck

"Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
news:OA3$eie%23GHA.3348@TK2MSFTNGP03.phx.gbl...
>I cycled my OS one more time. I'm still not getting prompted for Shield
>icon tasks with UAC turned on.
>
> Why not? Is there some setting that causes the UAC prompting to turn off?
> I don't think there should be. Obviously I've done it somehow. What gives?
>
> Chuck
>
> "Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
> news:Ou6Agae%23GHA.4468@TK2MSFTNGP05.phx.gbl...
>>I was just getting ready to post a similar bug. I'm running RC2, build
>>5744.
>>
>> I'm sitting in a Vista developer class right now and learning about the
>> manifest that are required to make an exceutable elevate to
>> requireAdministrator when it starts up. I'm logged on as a local
>> administrator on my laptop. UAC is turned on. I open control panel and
>> the User Accounts. With UAC on, anything with a shield should prompt me
>> to elevate to the administrator token. I click on "Turn User Accounts On
>> or Off", which has a shield next to it. I'm not getting prompted.
>>
>> I cycled UAC off and on (two reboots). On the second reboot, the Explorer
>> shell seemed to hang. Killed it in Task Manager and restarted it in Task
>> Manager.
>>
>> I'm still not prompted by a Shield task even with UAC on. It is as if UAC
>> were not on.
>>
>> Is anyone else having this problem?
>>
>> Thanks,
>>
>> Chuck
>>
>> "Roof Fiddler" <fiddler@roof.com> wrote in message
>> news:%23rU7%23Nc%23GHA.4888@TK2MSFTNGP04.phx.gbl...
>>> Running RC2 with default UAC settings and default filesystem ACLs,
>>> logged in as an administrator, I pressed win+e to open windows explorer
>>> (thus explorer was not run as administrator) and browsed to another
>>> user's home directory, and read a file therein, and got no UAC
>>> confirmation prompt.
>>> Wasn't I supposed to get a prompt?
>>>
>>
>

It makes sense to prompt only if it is a program and running it requires
admin rights.

--
Vipin Aravind
http://blogs.explorewindows.com

"Roof Fiddler" <fiddler@roof.com> wrote in message
news:%23rU7%23Nc%23GHA.4888@TK2MSFTNGP04.phx.gbl...
> Running RC2 with default UAC settings and default filesystem ACLs, logged
> in as an administrator, I pressed win+e to open windows explorer (thus
> explorer was not run as administrator) and browsed to another user's home
> directory, and read a file therein, and got no UAC confirmation prompt.
> Wasn't I supposed to get a prompt?
>

Were you using a built-in administrator account by any chance?

--
Vipin Aravind
http://blogs.explorewindows.com

"Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
news:OrfCQxe%23GHA.3348@TK2MSFTNGP03.phx.gbl...
>I figured out my problem. In Local Security Policy, I had "User Account
>Control: Behavior of the elvation prompt for administrators in Admin
>Approval Mode" set to "Elevate without prompt".
>
> This was my problem. Check your Local Security policies under the the User
> Account Control settings.
>
> Chuck
>
> "Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
> news:OA3$eie%23GHA.3348@TK2MSFTNGP03.phx.gbl...
>>I cycled my OS one more time. I'm still not getting prompted for Shield
>>icon tasks with UAC turned on.
>>
>> Why not? Is there some setting that causes the UAC prompting to turn off?
>> I don't think there should be. Obviously I've done it somehow. What
>> gives?
>>
>> Chuck
>>
>> "Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
>> news:Ou6Agae%23GHA.4468@TK2MSFTNGP05.phx.gbl...
>>>I was just getting ready to post a similar bug. I'm running RC2, build
>>>5744.
>>>
>>> I'm sitting in a Vista developer class right now and learning about the
>>> manifest that are required to make an exceutable elevate to
>>> requireAdministrator when it starts up. I'm logged on as a local
>>> administrator on my laptop. UAC is turned on. I open control panel and
>>> the User Accounts. With UAC on, anything with a shield should prompt me
>>> to elevate to the administrator token. I click on "Turn User Accounts On
>>> or Off", which has a shield next to it. I'm not getting prompted.
>>>
>>> I cycled UAC off and on (two reboots). On the second reboot, the
>>> Explorer shell seemed to hang. Killed it in Task Manager and restarted
>>> it in Task Manager.
>>>
>>> I'm still not prompted by a Shield task even with UAC on. It is as if
>>> UAC were not on.
>>>
>>> Is anyone else having this problem?
>>>
>>> Thanks,
>>>
>>> Chuck
>>>
>>> "Roof Fiddler" <fiddler@roof.com> wrote in message
>>> news:%23rU7%23Nc%23GHA.4888@TK2MSFTNGP04.phx.gbl...
>>>> Running RC2 with default UAC settings and default filesystem ACLs,
>>>> logged in as an administrator, I pressed win+e to open windows explorer
>>>> (thus explorer was not run as administrator) and browsed to another
>>>> user's home directory, and read a file therein, and got no UAC
>>>> confirmation prompt.
>>>> Wasn't I supposed to get a prompt?
>>>>
>>>
>>
>

"Dr. Network" <charles.hawkins@jenzabar.net> wrote in message
news:OrfCQxe%23GHA.3348@TK2MSFTNGP03.phx.gbl...
>I figured out my problem. In Local Security Policy, I had "User Account
>Control: Behavior of the elvation prompt for administrators in Admin
>Approval Mode" set to "Elevate without prompt".

Mine's still set to "Prompt for consent" (which is the default).

"Vipin" <Vipin@nospam.com> wrote in message
news:uKddgSg%23GHA.1196@TK2MSFTNGP02.phx.gbl...
> Were you using a built-in administrator account by any chance?

No.

"Vipin" <Vipin@nospam.com> wrote in message
news:%23t9QQSg%23GHA.1196@TK2MSFTNGP02.phx.gbl...
> It makes sense to prompt only if it is a program and running it requires
> admin rights.

So users are supposed to have unrestricted access to each other's files?

Hello,

If you have browsed to this folder location before, been prompted by UAC,
and then browsed into the folder, then Windows has changed the ACL's on
those files to allow your specific username read access. This is a permanent
operation that once completed will allow you to read those files without
going thru UAC.

Explorer is not designed to elevate its entire window to administrator
privileges, which would be required in order to browse a folder that is
accessible to you only through your status as an administrator. Instead, if
you browse to a folder that you do not explicitly have access to, it
attempts to run a seperate program with admin powers that edits the securtiy
on the files to specifically give you permanent read access.

I do not agree with this behavior - I think there should at least be an
advanced button on the message box that comes up that allows you to select
how to proceed (i.e. edit security on files to give you read access, edit
security to give you full access, or do not edit security just elevate
explorer to administrator status).

--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/