Admin User

[ProCookie]

On my user account i am an Administrator , Yet i still have to right click programs and click "Run as Administrator" to get them running correctly. Is this because i don't have as much privileges as the hidden admin account hidden within Vista? So i was wondering how do i show the hidden account or even better still can i change my account to have the correct privileges.

[CrowdAds]

[Snuffy]

if I remember correctly that is called "Disable UAC"

[ProCookie]

I don't want to do this as UAC does actually stops stuff that i don't want to access the Internet, plus it will have a great impact on my system security. I just want all my programs to run as Admin when i click them.

[Midway]

Another disadvantage in turning off UAC is that you also turn off IE7's Protected Mode.

[Snuffy]

Another way is logoff as you and login as Administrator..

[Znod]

Originally Posted by AnthonyCook

I don't want to do this as UAC does actually stops stuff that i don't want to access the Internet, plus it will have a great impact on my system security. I just want all my programs to run as Admin when i click them.

I think there may be an answer here: http://thevistageeks.com/forums/inde...opic=1752&st=0. But, I never did understand it--or many didn't get enough info to understand it. If you figure it out, then let us know what to do. It is a way to run UAC less securely, but with more freedom.

[Seansmit17]

that was easy to do znod..

go Start > Run type secpol.msc press enter

go to local policies > Security options, on the right scroll down to UAC - behaviour of the elevation promt for administrators in admin approval mode and set it to elevate with out promt..

the secpol.msc can be opend in the admin tools memu as well its Local Security Policy in that menu

[crabby]

secpol.msc method doesn't work for Home Basic or Home Premium. Instead you must use a registry edit. Run regedit... click edit, find... search for 'PromptOnSecureDesktop'... change the value type to 0 (right click, modify)... reboot!

crabby

[Znod]

My problem with it is the writer seemed to imply that one needs to be running as a standard user for the procedure to work (not with how to set it up). I run with full admin priviledges etc. and am a member of the Admin. group. I could never get clarification whether the process would do anything for me or not under the circumstances.

[ProCookie]

Originally Posted by crabby

secpol.msc method doesn't work for Home Basic or Home Premium. Instead you must use a registry edit. Run regedit... click edit, find... search for 'PromptOnSecureDesktop'... change the value type to 0 (right click, modify)... reboot!

crabby

Oh my that is worrying, if its that easy to disable it couldn't someone bring out an application and slip that little regedit in there??

[dazzlin]

Run regedit... click edit, find... search for 'PromptOnSecureDesktop'... change the value type to 0 (right click, modify)... reboot!

Crabby, what are the specific benefits as well as ramifications of doing this?

[crabby]

I believe it just stops the screen from greying out when an admin privledge is required... I don't use it, however, so don't actually know if it works

crabby

[Seansmit17]

im using it and ie protected mode is back on and the "this program requires admin yadadada" box hasnt poped up yet

[Znod]

Originally Posted by Seansmit17

that was easy to do znod..

go Start > Run type secpol.msc press enter

go to local policies > Security options, on the right scroll down to UAC - behaviour of the elevation promt for administrators in admin approval mode and set it to elevate with out promt..

the secpol.msc can be opend in the admin tools memu as well its Local Security Policy in that menu

Arteekay finally got back to me on the other thread I mentioned. So, now I am ready to try it. See below.

You don't have to go back to a standard user. I assumed you turned off UAC because you were annoyed by the "popups" while using the user created during install, which is a member of the administrator's group.

If that is the case, you can leave UAC on, but disable the popup by always allowing elevation. Follow the link in the first post, he explains the benefits and caveats better than I, I believe.

Basically, you turn UAC back on and change a few settings in gpedit.msc, after which you'll never see a popup, but you still might have to set a program to run as admin if it needs it and doesn't ask. These will fire right up just like when UAC is off.

[Znod]

Done deal.

Below is what is gained and lost. Given that I don't use IE, I don't think I have gained much. Opinions???

"There are TWO ways to effectively disable UAC. They are:

1. Hit the big master switch that disables UAC. This runs every application with admin privileges and access to everything on your system.
2. Enable the “Elevate without prompting” option. This means requests for elevation automatically succeed, no prompt.

So how is method #2 different?

* Applications will still run with non-Admin privileges unless they request them.
* Requests for elevation will succeed automatically.
* Filesystem and registry virtualization (ie. the “sandbox”) will still be enabled for applications running with low privileges.
* Protected Mode IE will still work

You can do it by running this reg file which won’t even require a reboot. However, it WILL set off the Security Center alert just like completely disabling UAC. If you had previously disabled UAC using the other method, you will have to re-enable it and reboot first.

So if you currently have UAC disabled, or are going to - try this instead. No, it is not nearly as secure as the default setup. Remember, any application requesting elevation will get it without telling you! But it’s better than just running with everything elevated all the time."