Run As Administrator does not work with UAC disabled

"Kurt Harriger" wrote:

> After installing vista ultimate I created a new administrative account and
> changed my account type to standard user then disabled UAC.

don't disable the UAC!!!

"mik" <mik@discussions.microsoft.com> wrote in message
news:521BDAF7-973B-4497-B6AB-1A3E6A5EA8CA@microsoft.com...

>
>
> "Kurt Harriger" wrote:
>

>> After installing vista ultimate I created a new administrative account
>> and
>> changed my account type to standard user then disabled UAC.

>
> don't disable the UAC!!!

I am using a standard user account because I want to be prompted with
credentials not continue for admin activities but when I use my
administrator account I want it to be an administrative account...
unfortuanatly with UAC disabled I was no longer prompted with credentials as
a standard user and IE protected mode doesn't work so I reenabled it and
enabled the built-in administrator account instead. IMHO UAC is worthless,
see my post on built-in administrator how I think it should have been
implemented.

- Kurt

"Kurt Harriger" wrote:

> IMHO UAC is worthless,

you're just an ignorant man.

"mik" <mik@discussions.microsoft.com> wrote in message
news:1D324B54-B01D-4BCA-B6A8-35C127BEC08A@microsoft.com...

>
>
> "Kurt Harriger" wrote:
>

>> IMHO UAC is worthless,

>
> you're just an ignorant man.

Ignorant people do not consider others points of view, they might otherwise
have learned something.

- Kurt

Hi mik,

>> IMHO UAC is worthless,

>
> you're just an ignorant man.

He's not! He's talking about the "proper" way of running a computer;
that's when you have one account for admin tasks and another account for
user tasks. This is how it's worked since NT 3.51, and it works well if
you bother to understand it.

The "problem" is that some people think it's ok to run user tasks as
Administrator, those are the "ignorant" people.

Kurt is right, the UAC is worthless; it's just a way to make it "seem"
like Vista has some kind of hardened security, BUT the reality is that
they should not have been running as Admin in the first place. It's the
wrong solution to the wrong problem.

--
Gerry Hickman (London UK)

> Kurt is right, the UAC is worthless; it's just a way to make it "seem"

> like Vista has some kind of hardened security, BUT the reality is that
> they should not have been running as Admin in the first place.

UAC is certainly not worthless, and the security is not fake .

UAC hardens the admin accounts by running non-admin programs as a standard
user while still allowing admin programs to run as admin (after user
consent), and also hardens the seperation between admin and non-admin
programs.

Also, UAC makes it easier to run as a standard user (both as a real standard
user and with programs running as a standard user when logged in as an
administrator) by enabling app-compat features such virtualization.

An administrative user now has the best of both worlds - they can easily run
administrative programs, and they can be confident that they will KNOW when
running a program with admin permisions because of the prompts, but they can
also run non-admin programs from inside their administrative account.
Seriously, what is wrong with doing this? How is this "fake" security as you
seem to imply? What do you think the right question and the right answer is?

--
- JB

Windows Vista Support Faq
http://www.jimmah.com/vista/

What are you trying to accomplish? If you are running as a standard user why
do you want uac disabled? Knowing what you are trying to do would help.

--
Kerry
MS-MVP Windows - Shell/User
www.vistahelp.ca



Kurt Harriger wrote:

> After installing vista ultimate I created a new administrative
> account and changed my account type to standard user then disabled
> UAC. When I login as my standard user and use Run As Administrator the
> application runs with no prompt as my standard user.
>
> Anyone else have this problem?
>
> Thanks,
> - Kurt

I was having difficulty accessing files on my usb drive. No surprise that I
was not able to access it as my standard user, as my vista user guid would
differ from my xp guid, it didn't even occur to me that I could have changed
the ACL from my standard user account I was rather looking for a way to open
the folder as administrator a feature explorer doesn't offer. But but I was
a bit frustrated and confused at first when I still recieved access denied
from my administrator account. I didn't at this time even think it was an
ACL issue I was logged in as a (vista) administrator and still couldn't
access it, but I had a good idea UAC was to blame and after I disabled it I
had no issue accessing the files. After a bit of research into why UAC
prevented me from accessing the drive I better understood the problem and
therefore the solution - a vista administrator is really an adminstrator
until an explicit elevation has occured, since explorer did not prompt me
for elevation it didn't even occur to me that I needed it, but once I
understood the problem the solution was as simple as changing the ACL.

It really shouldn't make a difference if UAC is enabled or not when using a
standard user account so I intended to just leave it disabled. However I
quickly ran into issues, without UAC enabled run as administrator from my
standard user account does not prompt for credentials (or elevate the
process) and IE Protected mode no longer works. But now that I have a
better understand the problem I have reenabled UAC, and I actually feel a
bit better knowing that if I can't perform the task as a standard user it
wont work as administrator either so I'm not going to be missing out on
anything by using a standard user account. I'll have exactly the same
issues as every other vista user running with a pseudo-admin account, for
better or worse at least I wont be alone . I've even found some
advantages of using a standard admin account over a pseudo-admin account.
When logged in as an administrator Vista will prompt you for elevation
immediatly when running Computer Management, if you don't elevate it doesn't
run, but when running as a standard user launching comptuer management will
run as a limited user account allowing me to safely view the information
without accidentally changing anything (but only from administrative tools
though, right clicking computer->manage still prompts) , if I want to change
something I must right click and run as administrator or right click
comptuer->manage.

- Kurt


"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:%23CVmGbLEHHA.1196@TK2MSFTNGP02.phx.gbl...

> What are you trying to accomplish? If you are running as a standard user
> why do you want uac disabled? Knowing what you are trying to do would
> help.
>
> --
> Kerry
> MS-MVP Windows - Shell/User
> www.vistahelp.ca
>
>
>
> Kurt Harriger wrote:

>> After installing vista ultimate I created a new administrative
>> account and changed my account type to standard user then disabled
>> UAC. When I login as my standard user and use Run As Administrator the
>> application runs with no prompt as my standard user.
>>
>> Anyone else have this problem?
>>
>> Thanks,
>> - Kurt

>
>