user account query

User Account Query

One of the irritating things about Windows XP is trying to carry out various aspects of system maintenance using admin credentials from a restricted user account; for instance, one cannot run msi packages under admin credentials from a restricted account, nor set Date and Time or change Firewall settings, as well as many other things.
It appears that Microsoft's solution is UAC, and it could easily be a fantastic way of getting around above-mentioned things. All tasks can be done from restricted accounts as long as the user provides a password.
However, to take advantage of UAC from a restricted account in Vista Beta 2, it appears that one also must default to running admin accounts in Admin Approval Mode. In practical terms that means that even when logged in as an administrator, one has to constantly click the pop-ups asking for permission to do this or that. Disable the option to "Run all administrators in Admin Approval Mode" (to stop the pop-ups when in admin accounts) and the possibility to perform all system tasks from a restricted account is also disabled. On top of that, while Admin Approval Mode is disabled, Protected Mode in IE is also disabled, whether you check the Protected Mode option in IE options or not.
Would appreciate if anyone knows of a way around, i.e. how to disable permission pop-ups while in an admin account, but still being able to use Protected Mode in IE and provide a password and run admin tasks from a restricted account.
Thanks,
//Lasse

On Sat, 17 Jun 2006 19:47:58 +1000, Lasse wrote:

One of the irritating things about Windows XP is trying to carry out various aspects of system maintenance using admin credentials from a restricted user account; for instance, one cannot run msi packages under admin credentials from a restricted account, nor set Date and Time or change Firewall settings, as well as many other things.
It appears that Microsoft's solution is UAC, and it could easily be a fantastic way of getting around above-mentioned things. All tasks can be done from restricted accounts as long as the user provides a password.
However, to take advantage of UAC from a restricted account in Vista Beta 2, it appears that one also must default to running admin accounts in Admin Approval Mode. In practical terms that means that even when logged in as an administrator, one has to constantly click the pop-ups asking for permission to do this or that. Disable the option to "Run all administrators in Admin Approval Mode" (to stop the pop-ups when in admin accounts) and the possibility to perform all system tasks from a restricted account is also disabled. On top of that, while Admin Approval Mode is disabled, Protected Mode in IE is also disabled, whether you check the Protected Mode option in IE options or not.
Would appreciate if anyone knows of a way around, i.e. how to disable permission pop-ups while in an admin account, but still being able to use Protected Mode in IE and provide a password and run admin tasks from a restricted account.
Thanks,
//Lasse

Windows key +R to bring up the Run dialog. Type in msconfig There's a button to click in the System Configuration Tool that will turn off UAC.
This could also be done in gpedit.msc however it entails several settings there. Not as easy to turn off and then turn back on as it is in msconfig.
-- Sharon F MS-MVP ~ Windows Shell/User

Windows Vista

Topic:


Nick: