Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - Vista Security

Reply
 
Old 10-17-2007   #1 (permalink)
hedgehog


 
 

Vista Security


I'm sorry if this has been asked before, but google didn't return any
valid links.

Ok, I'm new on vista business, and I've added my PC to the company's
domain, my domain account is a non-administrator. I then added the
domain account into the local Administrators group.

The problem is that vista dosn't consider me a local administrator. For
example, when I try to install a piece of stoftware, the UAC prompts me
for credentials and not for consent.

When it prompts me for credentials, I type in my domain username and
password and it lets me do it, meaning I have enough rights. If I have
enough rights to do it why dosn't it just ask me for consent ?

I've looked in Local Security Policy, and it is set to the default:
consent for administrators, and credentials for standard users.

I understand the idea behind UAC, and I would like use vista with it
enabled, but I'm a software developer, and I'm continually doing things
that makes vista prompt for credentials. I can't carry on typing on my
credentials every few minuites. Clicking on "Yes go ahead" on the
consent would be acceptable for me.

Any ideas ?


--
hedgehog
Posted via http://www.vistaheads.com


My System SpecsSystem Spec
Old 10-17-2007   #2 (permalink)
munchie


 
 

Re: Vista Security

On Oct 17, 1:35 am, hedgehog <hedgehog.2yl...@xxxxxx-
mx.forums.vistaheads.com> wrote:
Quote:

> I'm sorry if this has been asked before, but google didn't return any
> valid links.
>
> Ok, I'm new on vista business, and I've added my PC to the company's
> domain, my domain account is a non-administrator. I then added the
> domain account into the local Administrators group.
>
> The problem is that vista dosn't consider me a local administrator. For
> example, when I try to install a piece of stoftware, the UAC prompts me
> for credentials and not for consent.
>
> When it prompts me for credentials, I type in my domain username and
> password and it lets me do it, meaning I have enough rights. If I have
> enough rights to do it why dosn't it just ask me for consent ?
>
> I've looked in Local Security Policy, and it is set to the default:
> consent for administrators, and credentials for standard users.
>
> I understand the idea behind UAC, and I would like use vista with it
> enabled, but I'm a software developer, and I'm continually doing things
> that makes vista prompt for credentials. I can't carry on typing on my
> credentials every few minuites. Clicking on "Yes go ahead" on the
> consent would be acceptable for me.
>
> Any ideas ?
>
> --
> hedgehog
> Posted viahttp://www.vistaheads.com
Besides turning UAC completely off (not recommended), I'd take a look
at your individual UAC settings. To do this, run secpol.msc as an
Administrator and navigate to Local Policies -> User Account
Management. You can then add your username to those tasks you perform
daily and don't wish to enter a password *I think*

-- Munchie

My System SpecsSystem Spec
Old 10-17-2007   #3 (permalink)
Seth


 
 

Re: Vista Security

"hedgehog" <hedgehog.2yl30u@xxxxxx-mx.forums.vistaheads.com> wrote in message
news:hedgehog.2yl30u@xxxxxx-mx.forums.vistaheads.com...
Quote:

>
> I'm sorry if this has been asked before, but google didn't return any
> valid links.
>
> Ok, I'm new on vista business, and I've added my PC to the company's
> domain, my domain account is a non-administrator. I then added the
> domain account into the local Administrators group.
>
> The problem is that vista dosn't consider me a local administrator. For
> example, when I try to install a piece of stoftware, the UAC prompts me
> for credentials and not for consent.
>
> When it prompts me for credentials, I type in my domain username and
> password and it lets me do it, meaning I have enough rights. If I have
> enough rights to do it why dosn't it just ask me for consent ?
>
> I've looked in Local Security Policy, and it is set to the default:
> consent for administrators, and credentials for standard users.
>
> I understand the idea behind UAC, and I would like use vista with it
> enabled, but I'm a software developer, and I'm continually doing things
> that makes vista prompt for credentials. I can't carry on typing on my
> credentials every few minuites. Clicking on "Yes go ahead" on the
> consent would be acceptable for me.

They may be pushing a different policy down via GPO which overrides the
local security policy. Ask your companies IT department if that is the
case.

My System SpecsSystem Spec
Old 10-18-2007   #4 (permalink)
hedgehog


 
 

Re: Vista Security


munchie :

Like I said: in Local Security Policy (secpol.msc),
Local Policies > Security Options > User Account Control: Behavior of
the elevation prompt for administrators in Admin Approval Mode, is set
to Prompt for consent,
while Local Policies > Security Options > User Account Control:
Behavior of the elevation prompt for standard users, is set to Prompt
for credentials.
Now since I'm always being prompted for credentials it means that vista
considers me a standard user, eventhough my domain account is in the
local Administrators group, which should kick in the first rule and
prompt for consent rather. Shouldn't it ?

I've had a look in sepcol under Local Policies > User Rights
Assignment, but I can't find things like "Install software", am I
missing something ?

Seth:

I asked if they were pushing down a diff policy, and they replied "No".
Personally I doubt they even know how to do that

Cany anyone else make a suggestion ?


--
hedgehog
Posted via http://www.vistaheads.com

My System SpecsSystem Spec
Old 10-27-2007   #5 (permalink)
John Boshra


 
 

Administrator Logon

Hello, I'm a new Vista user,
I have the Vista Ultimate, I'm the one who installed it, but I can't logon
as an administrator, I don't know where is the applet to logon from,
previously in the windows XP, I was just hitting ALT+CTRL+Delete in the
logon window to get the administrator Account, but I tried it in vista,
nothing happened...
Can any one help me, how can I get the administrator account???
N.B, my current account is in the administrators group, but so many folders,
I can't access, such as the "Program Data\Application Data"...

John

My System SpecsSystem Spec
Old 10-27-2007   #6 (permalink)
Bruce Chambers


 
 

Re: Administrator Logon

John Boshra wrote:
Quote:

> Hello, I'm a new Vista user,
> I have the Vista Ultimate, I'm the one who installed it, but I can't
> logon as an administrator, I don't know where is the applet to logon
> from, previously in the windows XP, I was just hitting ALT+CTRL+Delete
> in the logon window to get the administrator Account, but I tried it in
> vista, nothing happened...
> Can any one help me, how can I get the administrator account???


Vista's built-in Administrator account is disabled by default, and
normally accessible only if no other administrative account is
available. You can enable the account via the Computer Management
Console (Right-click Computer > Manage > Local Users and Groups), if you
like.

Quote:

> N.B, my current account is in the administrators group, but so many
> folders, I can't access, such as the "Program Data\Application Data"...
>

"Can't access..." in what specific manner? I've no problem reading the
contents of the Program Data folder (there is no "Application Data"
subfolder on my system) using a normal administrative account.



--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Security discussion regarding hubs, firewalls, anti-virus and Vista Security System Security
Re: Vista Security Center and Norton Internet Security 2008 Vista security
Re: Vista Security Vulnerabilities showing in Security scan Vista security
Security Matters — Microsoft 2006 Security Summits Provide Security Training for Detroit Businesses Vista News
Security Matters — Microsoft 2006 Security Summits Provide Security Training for Detroit Businesses Vista News


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46