Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.


Go Back   Vista Forums > Vista Newsgroups > Vista security

RB

Vista - Run As Administrator does not work with UAC disabled

Reply
 
11-22-2006   #1
Kurt Harriger


 
 

Run As Administrator does not work with UAC disabled

After installing vista ultimate I created a new administrative account and
changed my account type to standard user then disabled UAC.
When I login as my standard user and use Run As Administrator the
application runs with no prompt as my standard user.

Anyone else have this problem?

Thanks,
- Kurt


My System SpecsSystem Spec
11-23-2006   #2
Josh


 
 

Re: Run As Administrator does not work with UAC disabled

no, as a standard user i get the cred ui prompt.

--
Josh


You never know what you might learn - http://windowsconnected.com

"Kurt Harriger" <kurtharriger@comcast.net> wrote in message
news:34185A73-5657-4B97-9BD4-643D16987B67@microsoft.com...
> After installing vista ultimate I created a new administrative account and
> changed my account type to standard user then disabled UAC.
> When I login as my standard user and use Run As Administrator the
> application runs with no prompt as my standard user.
>
> Anyone else have this problem?
>
> Thanks,
> - Kurt


My System SpecsSystem Spec
11-25-2006   #3
mik


 
 

RE: Run As Administrator does not work with UAC disabled



"Kurt Harriger" wrote:

> After installing vista ultimate I created a new administrative account and
> changed my account type to standard user then disabled UAC.


don't disable the UAC!!!
My System SpecsSystem Spec
11-25-2006   #4
Kurt Harriger


 
 

Re: Run As Administrator does not work with UAC disabled


"mik" <mik@discussions.microsoft.com> wrote in message
news:521BDAF7-973B-4497-B6AB-1A3E6A5EA8CA@microsoft.com...
>
>
> "Kurt Harriger" wrote:
>
>> After installing vista ultimate I created a new administrative account
>> and
>> changed my account type to standard user then disabled UAC.

>
> don't disable the UAC!!!


I am using a standard user account because I want to be prompted with
credentials not continue for admin activities but when I use my
administrator account I want it to be an administrative account...
unfortuanatly with UAC disabled I was no longer prompted with credentials as
a standard user and IE protected mode doesn't work so I reenabled it and
enabled the built-in administrator account instead. IMHO UAC is worthless,
see my post on built-in administrator how I think it should have been
implemented.

- Kurt

My System SpecsSystem Spec
11-25-2006   #5
mik


 
 

Re: Run As Administrator does not work with UAC disabled



"Kurt Harriger" wrote:

> IMHO UAC is worthless,


you're just an ignorant man.
My System SpecsSystem Spec
11-25-2006   #6
Kurt Harriger


 
 

Re: Run As Administrator does not work with UAC disabled


"mik" <mik@discussions.microsoft.com> wrote in message
news:1D324B54-B01D-4BCA-B6A8-35C127BEC08A@microsoft.com...
>
>
> "Kurt Harriger" wrote:
>
>> IMHO UAC is worthless,

>
> you're just an ignorant man.


Ignorant people do not consider others points of view, they might otherwise
have learned something.

- Kurt

My System SpecsSystem Spec
11-25-2006   #7
Kerry Brown


 
 

Re: Run As Administrator does not work with UAC disabled

What are you trying to accomplish? If you are running as a standard user why
do you want uac disabled? Knowing what you are trying to do would help.

--
Kerry
MS-MVP Windows - Shell/User
www.vistahelp.ca



Kurt Harriger wrote:
> After installing vista ultimate I created a new administrative
> account and changed my account type to standard user then disabled
> UAC. When I login as my standard user and use Run As Administrator the
> application runs with no prompt as my standard user.
>
> Anyone else have this problem?
>
> Thanks,
> - Kurt



My System SpecsSystem Spec
11-25-2006   #8
Kurt Harriger


 
 

Re: Run As Administrator does not work with UAC disabled

I was having difficulty accessing files on my usb drive. No surprise that I
was not able to access it as my standard user, as my vista user guid would
differ from my xp guid, it didn't even occur to me that I could have changed
the ACL from my standard user account I was rather looking for a way to open
the folder as administrator a feature explorer doesn't offer. But but I was
a bit frustrated and confused at first when I still recieved access denied
from my administrator account. I didn't at this time even think it was an
ACL issue I was logged in as a (vista) administrator and still couldn't
access it, but I had a good idea UAC was to blame and after I disabled it I
had no issue accessing the files. After a bit of research into why UAC
prevented me from accessing the drive I better understood the problem and
therefore the solution - a vista administrator is really an adminstrator
until an explicit elevation has occured, since explorer did not prompt me
for elevation it didn't even occur to me that I needed it, but once I
understood the problem the solution was as simple as changing the ACL.

It really shouldn't make a difference if UAC is enabled or not when using a
standard user account so I intended to just leave it disabled. However I
quickly ran into issues, without UAC enabled run as administrator from my
standard user account does not prompt for credentials (or elevate the
process) and IE Protected mode no longer works. But now that I have a
better understand the problem I have reenabled UAC, and I actually feel a
bit better knowing that if I can't perform the task as a standard user it
wont work as administrator either so I'm not going to be missing out on
anything by using a standard user account. I'll have exactly the same
issues as every other vista user running with a pseudo-admin account, for
better or worse at least I wont be alone . I've even found some
advantages of using a standard admin account over a pseudo-admin account.
When logged in as an administrator Vista will prompt you for elevation
immediatly when running Computer Management, if you don't elevate it doesn't
run, but when running as a standard user launching comptuer management will
run as a limited user account allowing me to safely view the information
without accidentally changing anything (but only from administrative tools
though, right clicking computer->manage still prompts) , if I want to change
something I must right click and run as administrator or right click
comptuer->manage.

- Kurt


"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:%23CVmGbLEHHA.1196@TK2MSFTNGP02.phx.gbl...
> What are you trying to accomplish? If you are running as a standard user
> why do you want uac disabled? Knowing what you are trying to do would
> help.
>
> --
> Kerry
> MS-MVP Windows - Shell/User
> www.vistahelp.ca
>
>
>
> Kurt Harriger wrote:
>> After installing vista ultimate I created a new administrative
>> account and changed my account type to standard user then disabled
>> UAC. When I login as my standard user and use Run As Administrator the
>> application runs with no prompt as my standard user.
>>
>> Anyone else have this problem?
>>
>> Thanks,
>> - Kurt

>
>


My System SpecsSystem Spec
11-25-2006   #9


 
 

Re: Run As Administrator does not work with UAC disabled

Try secpol.msc there a few option under UAC and standard accounts, though
there is still no option to turn off Mr UAC fanboy Mik ;-)

I do get asked to provide admin password in standard account with UAC off
though, perhaps I changed a setting in secpol.

Now that I don't have XP on my Vista box I haven't seen an access denied
message and now that I have Vista more or less set up I don't incur the
wrath of UAC that much. I don't think UAC is worth much but IE7 UAC aka
protected mode is something I'm barely in favour of.


If you haven't already have a look at security policies to see if you can
make Vista work better for you.

Colin T
"Kurt Harriger" <kurtharriger@comcast.net> wrote in message
news:E94D3D5D-ED49-4057-8AD5-974A7E67D08B@microsoft.com...
>I was having difficulty accessing files on my usb drive. No surprise that
>I was not able to access it as my standard user, as my vista user guid
>would differ from my xp guid, it didn't even occur to me that I could have
>changed the ACL from my standard user account I was rather looking for a
>way to open the folder as administrator a feature explorer doesn't offer.
>But but I was a bit frustrated and confused at first when I still recieved
>access denied from my administrator account. I didn't at this time even
>think it was an ACL issue I was logged in as a (vista) administrator and
>still couldn't access it, but I had a good idea UAC was to blame and after
>I disabled it I had no issue accessing the files. After a bit of research
>into why UAC prevented me from accessing the drive I better understood the
>problem and therefore the solution - a vista administrator is really an
>adminstrator until an explicit elevation has occured, since explorer did
>not prompt me for elevation it didn't even occur to me that I needed it,
>but once I understood the problem the solution was as simple as changing
>the ACL.
>
> It really shouldn't make a difference if UAC is enabled or not when using
> a standard user account so I intended to just leave it disabled. However
> I quickly ran into issues, without UAC enabled run as administrator from
> my standard user account does not prompt for credentials (or elevate the
> process) and IE Protected mode no longer works. But now that I have a
> better understand the problem I have reenabled UAC, and I actually feel a
> bit better knowing that if I can't perform the task as a standard user it
> wont work as administrator either so I'm not going to be missing out on
> anything by using a standard user account. I'll have exactly the same
> issues as every other vista user running with a pseudo-admin account, for
> better or worse at least I wont be alone . I've even found some
> advantages of using a standard admin account over a pseudo-admin account.
> When logged in as an administrator Vista will prompt you for elevation
> immediatly when running Computer Management, if you don't elevate it
> doesn't run, but when running as a standard user launching comptuer
> management will run as a limited user account allowing me to safely view
> the information without accidentally changing anything (but only from
> administrative tools though, right clicking computer->manage still
> prompts) , if I want to change something I must right click and run as
> administrator or right click comptuer->manage.
>
> - Kurt
>
>
> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
> news:%23CVmGbLEHHA.1196@TK2MSFTNGP02.phx.gbl...
>> What are you trying to accomplish? If you are running as a standard user
>> why do you want uac disabled? Knowing what you are trying to do would
>> help.
>>
>> --
>> Kerry
>> MS-MVP Windows - Shell/User
>> www.vistahelp.ca
>>
>>
>>
>> Kurt Harriger wrote:
>>> After installing vista ultimate I created a new administrative
>>> account and changed my account type to standard user then disabled
>>> UAC. When I login as my standard user and use Run As Administrator the
>>> application runs with no prompt as my standard user.
>>>
>>> Anyone else have this problem?
>>>
>>> Thanks,
>>> - Kurt

>>
>>

>


My System SpecsSystem Spec
11-26-2006   #10
Gerry Hickman


 
 

Re: Run As Administrator does not work with UAC disabled

Hi mik,

>> IMHO UAC is worthless,

>
> you're just an ignorant man.


He's not! He's talking about the "proper" way of running a computer;
that's when you have one account for admin tasks and another account for
user tasks. This is how it's worked since NT 3.51, and it works well if
you bother to understand it.

The "problem" is that some people think it's ok to run user tasks as
Administrator, those are the "ignorant" people.

Kurt is right, the UAC is worthless; it's just a way to make it "seem"
like Vista has some kind of hardened security, BUT the reality is that
they should not have been running as Admin in the first place. It's the
wrong solution to the wrong problem.

--
Gerry Hickman (London UK)
My System SpecsSystem Spec
Reply

RB


Thread Tools


Similar Threads for: Run As Administrator does not work with UAC disabled
Thread Forum
Run as administrator option disabled Vista account administration
Disabled Administrator trying to get rid of the log on Vista account administration
Administrator Account is Disabled. Vista account administration
Administrator account disabled...but it gets better! Vista General
Disabled User Account Control and disabled Administrator account. Vista account administration


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd