UAC stands for User Account Control and is a security system present in Microsoft Windows (since Windows Vista and Windows Server 2008) running most tasks as non-administrator and requiring the user to confirm the actions that require administrator privileges.
Questions tagged [uac]
154 questions
15
votes
4 answers
NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group
As per "Best Practices" staff in our IT department have two accounts. An unprivileged account and an account that is a member of the global Domain Admins ($DOMAIN\Domain Admins) group. On our file servers the Domain Admins group is added to the…
user62491
12
votes
1 answer
Administrator view ALL mapped drives
In my understanding of security, an administrator should be able to view all connections to and from a computer - just as they can view all processes/owner, network connections/owning process. However, Windows 8 seems to have disabled this.
As…
![](../../users/profiles/196625.webp)
jeubank12
- 221
- 1
- 2
- 4
11
votes
7 answers
Windows Explorer and UAC: run elevated
I am profoundly annoyed by UAC and switch it off for my admin user wherever I can. Yet, there are situations where I can't - especially if those are machines not under my continuous administration.
In this case, I am always challenged with the task…
![](../../users/profiles/76595.webp)
the-wabbit
- 40,319
- 13
- 105
- 169
10
votes
1 answer
Windows 7 UAC requests escalated to sysadmins?
Is there any way to have users UAC requests listed for admins (or a list of selected users)?
One alternative would be popups on the screen of logged on admins. Another would be listing requests on an interface through polling. For the second…
![](../../users/profiles/91364.webp)
DavveK
- 103
- 5
10
votes
9 answers
Elevating UAC via .bat file?
Pretty straightforward one that I'm having trouble finding an answer to.
serverfault previously helped me with finding a way to automate Windows updates without using WSUS. It's working fantastically, but to run it over the network, you have to…
![](../../users/profiles/28937.webp)
jslaker
- 155
- 2
- 2
- 7
8
votes
1 answer
Entering local admin username and password in a script
I have alot of clients on my network and I want my script to do the following:
[1] Open an elevated command prompt using the local admin details.
Note: I do not want to have to enter a username and password for each user.
[2] Uninstall java…
![](../../users/profiles/388562.webp)
timboslice101
- 107
- 3
8
votes
5 answers
Windows folder permissions, Administrators and UAC, what's the "right" way to deal with this?
I have a folder with permissions:
Administrators (group): Full.
J. Bloggs: Full.
I'm logged in as a member of the Administrators group.
I can't open the folder in Explorer because "you do not have permission".
I suspect this is because normal…
![](../../users/profiles/57144.webp)
TessellatingHeckler
- 5,676
- 3
- 25
- 44
7
votes
1 answer
In what ways can access token update be triggered for administrator accounts on workstations?
This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the workstation until the administrator signed in to the…
![](../../users/profiles/115232.webp)
alx9r
- 1,643
- 3
- 16
- 37
7
votes
7 answers
How to use psexec to start installation or other task that requires UAC interaction?
I'm trying to remotely start installations and I'd like not to disable UAC. If I start the processes remotely using psexec, the installer will just get stalled waiting for the UAC prompt. Other tasks such as temporary files cleaning, services…
![](../../users/profiles/21962.webp)
Miguel Ventura
- 183
- 1
- 1
- 6
7
votes
4 answers
Domain Admins group denied access to d: drive
I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01).
The member server has a C: and a D: drive.
Part of our standard build is to remove all permissions…
![](../../users/profiles/822.webp)
Kev
- 7,777
- 17
- 78
- 108
7
votes
5 answers
How do I run an elevated explorer on W8R2 with default UAC?
On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer as administrator it doesn't appear to actually grant administrative rights to the process.
Is there a way to leave UAC at that level…
![](../../users/profiles/4514.webp)
jt.
- 331
- 3
- 6
7
votes
4 answers
How important is it to install on the program files folder?
In a proper installation of an average software, its executables would be in the program files folder; its user data in the user's application data folder; it's non user specific data in the all users application data folder; and it should usually…
![](../../users/profiles/8586.webp)
eran
- 267
- 1
- 6
- 14
6
votes
1 answer
WMI permissions for changing local IP without elevated privileges
I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings only if it has been started with "Run as…
![](../../users/profiles/365037.webp)
Alexander Zwitbaum
- 161
- 2
6
votes
2 answers
App needs elevated privileges to run - why?
Not as stupid as it sounds ;)
I have a third party app that I have no source for. Official support is for XP and higher - but higher only with UAC off. Which I do not want.
Now, I know the programmers and they are willing to make a change if it is…
![](../../users/profiles/37059.webp)
TomTom
- 50,857
- 7
- 52
- 134
6
votes
2 answers
Why sometimes is required to log off and log on back again adding a group to a user
In Windows systems (particularly Windows Server 2008R2 which I an using), sometimes when I add a local user to a local group, the user needs to log-off and log-on back again before this new group is registered to him.
But Sometimes as well, the…
![](../../users/profiles/100298.webp)
user1034912
- 1,335
- 3
- 14
- 20