Server Fault
Server Fault

Questions tagged [uac]

User Account Control (UAC) is a security system present and enabled by default in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/how-it-works

165 questions
15
votes
4 answers

NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group

As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file servers the Domain Admins group is added to the…
user62491
12
votes
7 answers

Windows Explorer and UAC: run elevated

I am profoundly annoyed by UAC and switch it off for my admin user wherever I can. Yet, there are situations where I can't - especially if those are machines not under my continuous administration. In this case, I am always challenged with the task…
the-wabbit
  • 41,352
12
votes
1 answer

Administrator view ALL mapped drives

In my understanding of security, an administrator should be able to view all connections to and from a computer - just as they can view all processes/owner, network connections/owning process. However, Windows 8 seems to have disabled this. As…
jeubank12
  • 221
10
votes
1 answer

Windows 7 UAC requests escalated to sysadmins?

Is there any way to have users UAC requests listed for admins (or a list of selected users)? One alternative would be popups on the screen of logged on admins. Another would be listing requests on an interface through polling. For the second…
DavveK
  • 103
10
votes
9 answers

Elevating UAC via .bat file?

Pretty straightforward one that I'm having trouble finding an answer to. serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working fantastically, but to run it over the network, you have to…
jslaker
  • 155
8
votes
1 answer

Entering local admin username and password in a script

I have alot of clients on my network and I want my script to do the following: [1] Open an elevated command prompt using the local admin details. Note: I do not want to have to enter a username and password for each user. [2] Uninstall java…
timboslice101
  • 107
8
votes
5 answers

Windows folder permissions, Administrators and UAC, what's the "right" way to deal with this?

I have a folder with permissions: Administrators (group): Full. J. Bloggs: Full. I'm logged in as a member of the Administrators group. I can't open the folder in Explorer because "you do not have permission". I suspect this is because normal…
TessellatingHeckler
  • 5,776
7
votes
1 answer

In what ways can access token update be triggered for administrator accounts on workstations?

This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the workstation until the administrator signed in to the…
alx9r
  • 1,673
7
votes
7 answers

How to use psexec to start installation or other task that requires UAC interaction?

I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks such as temporary files cleaning, services…
Miguel Ventura
  • 183
7
votes
2 answers

App needs elevated privileges to run - why?

Not as stupid as it sounds ;) I have a third party app that I have no source for. Official support is for XP and higher - but higher only with UAC off. Which I do not want. Now, I know the programmers and they are willing to make a change if it is…
TomTom
  • 52,109
  • 7
  • 59
  • 142
7
votes
2 answers

Why sometimes is required to log off and log on back again adding a group to a user

In Windows systems (particularly Windows Server 2008R2 which I an using), sometimes when I add a local user to a local group, the user needs to log-off and log-on back again before this new group is registered to him. But Sometimes as well, the…
user1034912
  • 1,404
  • 3
  • 16
  • 22
7
votes
4 answers

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part of our standard build is to remove all permissions…
Kev
  • 7,968
7
votes
4 answers

How important is it to install on the program files folder?

In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users application data folder; and it should usually…
Eran
  • 267
6
votes
1 answer

WMI permissions for changing local IP without elevated privileges

I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings only if it has been started with "Run as…
Alexander Zwitbaum
  • 161
6
votes
4 answers

Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has permission, the user will be prompted to "Click…
jimbobmcgee
  • 2,695
1
2 3
…
10 11