Questions tagged [uac]

UAC stands for User Account Control and is a security system present and enabled by default in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.

155 questions
3
votes
0 answers

Giving Select Windows Domain Users Symbolic Link Privilege

I would like to setup select users on our domain to have the ability to create symbolic links on local NTFS drives and network shares without needing to run as Administrator, as part of an application with will call the CreateSymbolicLink() API…
fp0n
  • 31
  • 1
  • 2
3
votes
6 answers

Why can't I drag/drop a file for editing in notepad in Windows Server 2008?

When notepad is run, I can drag/drop a file to open it, but then it can't save the file. When I run notepad elevated to save the file, I can no longer drag/drop to open the file. I understand its a security risk to drag a file from a non-elevated…
Triynko
  • 3,418
  • 6
  • 31
  • 30
3
votes
1 answer

How to disable UAC on a domain controller?

I need to disable UAC on a Windows Server 2008 R2 domain controller, but I can't access its settings through the usual path (Control Panel -> User Accounts -> User Accounts), because a DC doesn't have a local user database, so the "User Accounts"…
Massimo
  • 70,200
  • 57
  • 200
  • 323
3
votes
3 answers

What can trigger a UAC prompt on an executable?

I have a workstation on a domain that's displaying the UAC (User Account Control) prompt for executing a program and I can't figure out why (I don't want it running with administrator privileges). It's a Windows 7 workstation and Windows Server…
Scott Bussinger
  • 1,801
  • 4
  • 24
  • 27
3
votes
3 answers

Why would my domain admins turn off UAC?

I'm a developer of internal software in our company, I've gotten used to UAC in Win7, I prefer to run with in enabled so that our software works correctly with it enabled. Sysadmins have recently pushed out GPO that turns it off every time we…
DanO
  • 151
  • 1
  • 5
3
votes
2 answers

Automatically run a powershell script elevated

Is there a way to run a powershell script automatically in Elevated mode? I am trying to automate some post-image tasks without user intervention, but am getting caught with the UAC. Is there a way to "bypass" this, possibly by running as another…
Ben
  • 1,137
  • 9
  • 26
  • 44
3
votes
1 answer

Win7 UAC tokens

It is known that under win7 UAC you receive 2 tokens when you logon to the system: std user token and admin token. If I disable UAC, what should I get? only admin token? or still both with no consideration to the UAC status?
Talc
2
votes
0 answers

Almost every administrative action is prevented with "access denied" on a Windows Server 2008 R2

On a Server 2008 R2 (member of a domain but not a domain controller) we suddenly can't perform any administrative task. Every action (like net stop ..., whoami, ...) is denied with an access denied message. We can access the eventlogs but the only …
marsh-wiggle
  • 2,145
  • 5
  • 29
  • 45
2
votes
1 answer

smart card for UAC only

I'm in the process of configuring USB Yubikeys as a smart card for our company so that staff can elevate to an admin account (added to the computer's local administrators group) by simply inserting the key and typing a PIN. If possible I would like…
captcha
  • 578
  • 5
  • 16
2
votes
1 answer

UAC - When set to "Never notify" do I still have a dual token?

UAC can be set to never notify, but that's not the same as not having UAC at all. What I mean is, does the OS still create a dual token for admin users but just auto-elevate everything? The difference is important since various file-system ops will…
Luke Puplett
  • 939
  • 3
  • 16
  • 24
2
votes
1 answer

Run php exec function to stop windows services

I have written a web program in php that needs to stop a windows service and start's it when run like this: exec('net stop spooler'); //to stop printer spooler exec('net start spooler'); //to start printer spooler the above codes doesnt stop the…
2
votes
1 answer

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has members: My_domain\settings Is a member of:…
Simo Kivistö
  • 188
  • 1
  • 2
  • 11
2
votes
2 answers

Windows UAC disabled but I'm still getting the elevation pop-up

I have UAC disabled on my Windows 2008R2. Why am I still getting UAC "Windows needs your permission to continue" window before trying to change Owner of a folder? My user is a member of the Administrators group Thanks Update: I forgot to mention…
Bibi195
  • 63
  • 1
  • 6
2
votes
1 answer

Running Visual Studio and IIS without Administrator rights on Windows

I find it hard to believe that Microsoft didn't forsee a possibility where a company would need a developer to be able to use IIS and Visual Studio with full rights but NOT want to just haphazardly grant full administrative rights on the whole…
user2480201
  • 23
  • 1
  • 4
2
votes
2 answers

Unable to remove "Run this program as an administrator" (greyed out) with Excel 2010

I have issue with one of the user in Terminal Server 2008 R2 who has "Run this program as an administrator" checked and greyed out with Excel 2010. This causes UAC to popup requesting for administrator credential whenever user want to start excel. I…