Does "Run as administator" really do anything if UAC is off?

6

1

I know that User Account Control should not be turned off, but let's just say it's off for the sake of argument. With UAC off, I still have the option to "Run as administrator" on executable files, even though I have an Administrator account type. Additionally, there is a checkbox under the Compatability tab (via Properties) labeled Run this program as an administrator. Do either of these options actually do anything if UAC is off?

cowgod

Posted 2009-11-03T03:02:24.663

Reputation: 1 816

Answers

4

Yes. When you use the slider to set UAC to "Never notify", it's not really turning UAC off - it's just turning the UAC notification level down to zero. UAC is still on and UAC events still appear in the Windows event log. If you have the slider all the way down so that you get no UAC notifications and then do a "Run this program as an administrator", UAC will still elevate the user's privileges in order to perform the action. It will just be done silently.

enter image description here

Matthew

Posted 2009-11-03T03:02:24.663

Reputation: 2 450

3

According to Microsoft, that really turns off UAC. http://technet.microsoft.com/en-us/library/ee679793(v=ws.10).aspx

– surfasb – 2011-12-01T09:25:55.227

This is almost a perfect answer. I updated the question stating that I am using an Administrator account. Even with this setting, am I essentially using a Standard User account all the time except those situations where UAC elevates my permissions? Please update your answer to differentiate between an Administrator versus a Standard User account. With that extra bit of info, I will more than likely mark this answer as accepted. – cowgod – 2009-11-03T13:48:17.573

2

By default, UAC removes certain abilities from a administrator. These include the ability to write to restricted paths amongst other things. Run as administrator gives the process the additional security privileges needed to accomplish theses tasks.

Turning of UAC basically does the same job as running as administrator (when using an account with administrator privileges) and the reason for it being on the menu is probably the same reason as having Paste always visible but sometimes disabled - it is more trouble to remove it...

The reason for it being there in properties is so the setting gets saved - if you ever turn UAC back on, it will remember that setting.

William Hilsum

Posted 2009-11-03T03:02:24.663

Reputation: 111 572

2"Turning of UAC basically does the same job as running as administrator" c'mon, that is totally wrong. turning off UAC does not give you admin rights on a restricted account! – None – 2009-11-03T14:31:59.073

1but of course ... that's the whole idea of a restricted account, isn't it? so you can run a program as admin if necessary. however, UAC, if disabled, will not warn you about the dangers of doing so. :) – None – 2009-11-03T14:55:35.640

@Molly - I have edited my answer slightly, but your understanding of UAC in your answer is wrong. (someone just posted an answer, and this question got bumped, so taking this time to correct it!) – William Hilsum – 2010-01-20T03:36:37.073

0

Running as Administrator with UAC turned off is useful for those situations when you log to Windows on a non administrator account. As you might expect certain applications or certain actions require administrator privileges.

With UAC turned off, user level permissions at the file and directory level are still in effect and Run As Administrator becomes a useful tool in order to gain access.

A Dwarf

Posted 2009-11-03T03:02:24.663

Reputation: 17 756

imho it is better to create an additional admin account and use it instead of the built-in one, if need be. – None – 2009-11-05T11:26:31.920

-1

I still have the option to "Run as administrator" on executable files, even though I have an Administrator account type.

To clarify this: "Run as administrator" is not the same as running a program from an account with administrator rights - it means to execute a program from the built-in Administrator account which in Windows Vista/7 is disabled by default (not visible).

You really shouldn't use this account for anything other than troubleshooting. In fact, you probably shouldn't use it at all.

For some reason, good old "Run as ..." is now hidden; to access this option, press Shift and right click the shortcut/executable to get this:

enter image description here

enter image description here

UAC is in no way related to "Run as administrator" except you will not receive a warning when using the built-in Administrator account, if UAC is disabled or set to "Never notify".

Molly7244

Posted 2009-11-03T03:02:24.663

Reputation:

2@Molly - this is incorrect (and edited my answer slightly). It does not run as the administrator account. UAC by default removes certain rights from an user (such as ability to write to restricted directories). When you "run as administrator" it basically gives these rights back to an user. At no point do you actually use another account through UAC. – William Hilsum – 2010-01-20T03:37:12.047