Windows Vista Forums
Vista Forums Home Join Vista Forums Webcasts Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista Security

Update your Vista Drivers Update Your Drivers Now!!
Closed Thread
 
Thread Tools Display Modes
Old 10-17-2007   #1 (permalink)
hedgehog
Guest


 

Vista Security


I'm sorry if this has been asked before, but google didn't return any
valid links.

Ok, I'm new on vista business, and I've added my PC to the company's
domain, my domain account is a non-administrator. I then added the
domain account into the local Administrators group.

The problem is that vista dosn't consider me a local administrator. For
example, when I try to install a piece of stoftware, the UAC prompts me
for credentials and not for consent.

When it prompts me for credentials, I type in my domain username and
password and it lets me do it, meaning I have enough rights. If I have
enough rights to do it why dosn't it just ask me for consent ?

I've looked in Local Security Policy, and it is set to the default:
consent for administrators, and credentials for standard users.

I understand the idea behind UAC, and I would like use vista with it
enabled, but I'm a software developer, and I'm continually doing things
that makes vista prompt for credentials. I can't carry on typing on my
credentials every few minuites. Clicking on "Yes go ahead" on the
consent would be acceptable for me.

Any ideas ?


--
hedgehog
Posted via http://www.vistaheads.com


My System SpecsSystem Spec
Old 10-17-2007   #2 (permalink)
munchie
Guest


 

Re: Vista Security

On Oct 17, 1:35 am, hedgehog <hedgehog.2yl...@xxxxxx-
mx.forums.vistaheads.com> wrote:
Quote:

> I'm sorry if this has been asked before, but google didn't return any
> valid links.
>
> Ok, I'm new on vista business, and I've added my PC to the company's
> domain, my domain account is a non-administrator. I then added the
> domain account into the local Administrators group.
>
> The problem is that vista dosn't consider me a local administrator. For
> example, when I try to install a piece of stoftware, the UAC prompts me
> for credentials and not for consent.
>
> When it prompts me for credentials, I type in my domain username and
> password and it lets me do it, meaning I have enough rights. If I have
> enough rights to do it why dosn't it just ask me for consent ?
>
> I've looked in Local Security Policy, and it is set to the default:
> consent for administrators, and credentials for standard users.
>
> I understand the idea behind UAC, and I would like use vista with it
> enabled, but I'm a software developer, and I'm continually doing things
> that makes vista prompt for credentials. I can't carry on typing on my
> credentials every few minuites. Clicking on "Yes go ahead" on the
> consent would be acceptable for me.
>
> Any ideas ?
>
> --
> hedgehog
> Posted viahttp://www.vistaheads.com
Besides turning UAC completely off (not recommended), I'd take a look
at your individual UAC settings. To do this, run secpol.msc as an
Administrator and navigate to Local Policies -> User Account
Management. You can then add your username to those tasks you perform
daily and don't wish to enter a password *I think*

-- Munchie

My System SpecsSystem Spec
Old 10-17-2007   #3 (permalink)
Seth
Guest


 

Re: Vista Security

"hedgehog" <hedgehog.2yl30u@xxxxxx-mx.forums.vistaheads.com> wrote in message
news:hedgehog.2yl30u@xxxxxx-mx.forums.vistaheads.com...
Quote:

>
> I'm sorry if this has been asked before, but google didn't return any
> valid links.
>
> Ok, I'm new on vista business, and I've added my PC to the company's
> domain, my domain account is a non-administrator. I then added the
> domain account into the local Administrators group.
>
> The problem is that vista dosn't consider me a local administrator. For
> example, when I try to install a piece of stoftware, the UAC prompts me
> for credentials and not for consent.
>
> When it prompts me for credentials, I type in my domain username and
> password and it lets me do it, meaning I have enough rights. If I have
> enough rights to do it why dosn't it just ask me for consent ?
>
> I've looked in Local Security Policy, and it is set to the default:
> consent for administrators, and credentials for standard users.
>
> I understand the idea behind UAC, and I would like use vista with it
> enabled, but I'm a software developer, and I'm continually doing things
> that makes vista prompt for credentials. I can't carry on typing on my
> credentials every few minuites. Clicking on "Yes go ahead" on the
> consent would be acceptable for me.

They may be pushing a different policy down via GPO which overrides the
local security policy. Ask your companies IT department if that is the
case.

My System SpecsSystem Spec
Old 10-18-2007   #4 (permalink)
hedgehog
Guest


 

Re: Vista Security


munchie :

Like I said: in Local Security Policy (secpol.msc),
Local Policies > Security Options > User Account Control: Behavior of
the elevation prompt for administrators in Admin Approval Mode, is set
to Prompt for consent,
while Local Policies > Security Options > User Account Control:
Behavior of the elevation prompt for standard users, is set to Prompt
for credentials.
Now since I'm always being prompted for credentials it means that vista
considers me a standard user, eventhough my domain account is in the
local Administrators group, which should kick in the first rule and
prompt for consent rather. Shouldn't it ?

I've had a look in sepcol under Local Policies > User Rights
Assignment, but I can't find things like "Install software", am I
missing something ?

Seth:

I asked if they were pushing down a diff policy, and they replied "No".
Personally I doubt they even know how to do that

Cany anyone else make a suggestion ?


--
hedgehog
Posted via http://www.vistaheads.com

My System SpecsSystem Spec
Old 10-27-2007   #5 (permalink)
John Boshra
Guest


 

Administrator Logon

Hello, I'm a new Vista user,
I have the Vista Ultimate, I'm the one who installed it, but I can't logon
as an administrator, I don't know where is the applet to logon from,
previously in the windows XP, I was just hitting ALT+CTRL+Delete in the
logon window to get the administrator Account, but I tried it in vista,
nothing happened...
Can any one help me, how can I get the administrator account???
N.B, my current account is in the administrators group, but so many folders,
I can't access, such as the "Program Data\Application Data"...

John

My System SpecsSystem Spec
Old 10-27-2007   #6 (permalink)
Bruce Chambers
Guest


 

Re: Administrator Logon

John Boshra wrote:
Quote:

> Hello, I'm a new Vista user,
> I have the Vista Ultimate, I'm the one who installed it, but I can't
> logon as an administrator, I don't know where is the applet to logon
> from, previously in the windows XP, I was just hitting ALT+CTRL+Delete
> in the logon window to get the administrator Account, but I tried it in
> vista, nothing happened...
> Can any one help me, how can I get the administrator account???


Vista's built-in Administrator account is disabled by default, and
normally accessible only if no other administrative account is
available. You can enable the account via the Computer Management
Console (Right-click Computer > Manage > Local Users and Groups), if you
like.

Quote:

> N.B, my current account is in the administrators group, but so many
> folders, I can't access, such as the "Program Data\Application Data"...
>

"Can't access..." in what specific manner? I've no problem reading the
contents of the Program Data folder (there is no "Application Data"
subfolder on my system) using a normal administrative account.



--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
My System SpecsSystem Spec
Closed Thread

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
Security discussion regarding hubs, firewalls, anti-virus and Vista Security eganders System Security 3 08-21-2008 06:11 AM
Re: Vista Security Center and Norton Internet Security 2008 PA Bear [MS MVP] Vista security 1 04-01-2008 05:47 AM
Re: Vista Security Vulnerabilities showing in Security scan PA Bear Vista security 3 12-21-2006 12:03 PM
Security Matters — Microsoft 2006 Security Summits Provide Security Training for Detroit Businesses z3r010 Vista News 0 06-26-2006 09:02 AM
Security Matters — Microsoft 2006 Security Summits Provide Security Training for Detroit Businesses z3r010 Vista News 0 06-26-2006 09:01 AM


Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51