 |
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows 7. The Windows 7 forum also covers news and updates and has an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.
Windows 7 - If my user account is the administrator account, why the need for... |
12-27-2010
|
#1 | | Windows 7 Home Premium 64-bit |
If my user account is the administrator account, why the need for... the "run as administrator" option? If you're the administrator, aren't all programs "run as administrator" by default?
The reason I ask is that I'm trying to delete something via Spybot, and a message appeared on the screen saying I need to run the program as an adminstrator in order to perform the deletion.
| My System Specs | | System Manufacturer/Model Number Compaq Presario CQ5205Y Desktop PC OS Windows 7 Home Premium 64-bit CPU AMD Sempron Processor LE-1300 2.30 GHz Memory 2 GB RAM Graphics Card Integrated graphics using nVidia GeForce 6150SE Sound Card Integrated Realtek ALC888S Audio Screen Resolution 1280x1024 Hard Drives 250 GB Internet Speed DSL |
12-27-2010
|
#2 | | Windows 7 Ultimate 32-bit & 64-bit both SP1 |
By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account. Some programs, however, need to be run at a higher privilege level, even when run from an administrator account. In these cases, you need to right-click and select Run as administrator. Depending on the account you are currently using, you will be asked to provide administrative credentials (from a standard account) or confirm that you want to elevate (from within an administrative account).
This is part of the improved security in Windows 7, and is designed to make it harder for malware to get on your system. Of course, it isn't infallible, so you must always keep alert.
This is controlled by means of tokens, and a standard account has just one whereas an administrator account has two, a standard token and an administrative token. In normal use, both types of account use the token with standard privileges. When you right-click and select Run as administrator (see above), you are instructing the program (and that program only) to use the administrator token and to run with full administrative privileges. | My System Specs | | System Manufacturer/Model Number Home Built, N/A OS Windows 7 Ultimate 32-bit & 64-bit both SP1 CPU AMD Athlon (tm) 64 X2 Dual Core Processor 7550 @2.5GHz Motherboard Gigabyte GA-MA770-ES3 Memory 2 x 2GB PC2-6400 (DDR2-800), Ganged Mode, (4GB total) Graphics Card Nvidia GeForce GTX 550 Ti 1GB Sound Card Realtek High Definition on board solution (ALC 892) Monitor(s) Displays ViewSonic VA1912w Widescreen (VGA) Screen Resolution 1440x900 Keyboard Microsoft Digital Media Pro Keyboard (USB) Mouse Microsoft Comfort Optical Mouse 3000 (USB) PSU XFX Pro Series 850W Semi-Modular Case Antec NSK 4000B II Cooling 1 x 80mm Front Inlet (with filter) 1 x 120mm Rear Exhaust Hard Drives OCZ Petrol SSD 64GB SATA III
OCZ Petrol SSD 128GB SATA III
Samsung HD501LJ 500GB SATA II x2
Hitachi HDS721010CLA332 1TB SATA II
1 x Iomega 1.5TB Ext USB 2.0 Internet Speed NetGear DG834Gv3 ADSL Modem/Router (Ethernet) ~4.0 Mb/s (O2) Other Info PCI-Express SATA III controller (Marvell 88SE9128 chipset)
Optical Drive: HL-DT-ST BD-RE BH10LS30 SATA Bluray
Lexmark S305 Printer/Scanner/Copier (USB)
CTF-430 Tablet & Pen
WEI Score: |
12-27-2010
|
#3 | | Windows 7 Ultimate RTM (Technet) |

Quote: Originally Posted by Dwarf By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account. Ummmm, no. Not true at all. I'm not even sure how you would justify that statement. Try to perform some administrative tasks with a standard user account. | My System Specs | | System Manufacturer/Model Number Custom OS Windows 7 Ultimate RTM (Technet) CPU 3.00 gigahertz Intel Core2 Duo E8400 Motherboard ASUSTeK Computer INC. P5K/EPU Rev 1.xx Memory 4GB Graphics Card ATI Radeon X1950 Pro Sound Card Built in HD Audio Monitor(s) Displays 22" Gateway LCD Screen Resolution 1920 x 1200 Keyboard Logitech G11 Mouse Microsoft Wireless Laser Mouse 5000 Hard Drives ST3160023A [Hard drive] (160.04 GB) -- drive 0, rev 8.01, ST3500630AS [Hard drive] (500.11 GB) -- drive 2, rev 3.AAK
ST3500630AS [Hard drive] (500.11 GB) -- drive 1, rev 3.AAK Internet Speed 13.44 Mbps |
12-27-2010
|
#4 | | |

Quote: Originally Posted by MacGyvr 
Quote: Originally Posted by Dwarf By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account. Ummmm, no. Not true at all. I'm not even sure how you would justify that statement. Try to perform some administrative tasks with a standard user account. im thinking he is meaning, the same rights the applications have to run, not necessarily the user rights. | My System Specs | | OS Windows 7 pro 64 bit CPU Intel Core i7-870 Lynnfield 2.93GHz Motherboard MSI P55-GD80 LGA 1156 Memory Gskill 8 gig, 4x2gig Graphics Card ASUS EAH5850 Sound Card built in HD Monitor(s) Displays HP 23 inch Keyboard Logitech G110 Mouse Razer Death Adder Case Cooler master HAF 932 Cooling 4 case fans, v6 cpu cooler Hard Drives 1tbHDD,500HDD,500HDD,30SSD no RAID... Internet Speed never fast enough |
12-27-2010
|
#5 | | Windows 7 Ultimate 32-bit & 64-bit both SP1 |
From my bookshelf: 
Quote: Originally Posted by Windows 7 Administrator's Pocket Consultant, William R. Stanek, Microsoft Press All applications that run on Windows 7 derive their security context from the current user's access token. By default, UAC turns all users into standard users even if they are members of the Administrators group. If an administrator user consents to the use of his/her administrator privileges, a new access token is created for the user. It contains all the user's privileges, and this access token - rather than the user's standard access token - is used to start an application or process. | My System Specs | | System Manufacturer/Model Number Home Built, N/A OS Windows 7 Ultimate 32-bit & 64-bit both SP1 CPU AMD Athlon (tm) 64 X2 Dual Core Processor 7550 @2.5GHz Motherboard Gigabyte GA-MA770-ES3 Memory 2 x 2GB PC2-6400 (DDR2-800), Ganged Mode, (4GB total) Graphics Card Nvidia GeForce GTX 550 Ti 1GB Sound Card Realtek High Definition on board solution (ALC 892) Monitor(s) Displays ViewSonic VA1912w Widescreen (VGA) Screen Resolution 1440x900 Keyboard Microsoft Digital Media Pro Keyboard (USB) Mouse Microsoft Comfort Optical Mouse 3000 (USB) PSU XFX Pro Series 850W Semi-Modular Case Antec NSK 4000B II Cooling 1 x 80mm Front Inlet (with filter) 1 x 120mm Rear Exhaust Hard Drives OCZ Petrol SSD 64GB SATA III
OCZ Petrol SSD 128GB SATA III
Samsung HD501LJ 500GB SATA II x2
Hitachi HDS721010CLA332 1TB SATA II
1 x Iomega 1.5TB Ext USB 2.0 Internet Speed NetGear DG834Gv3 ADSL Modem/Router (Ethernet) ~4.0 Mb/s (O2) Other Info PCI-Express SATA III controller (Marvell 88SE9128 chipset)
Optical Drive: HL-DT-ST BD-RE BH10LS30 SATA Bluray
Lexmark S305 Printer/Scanner/Copier (USB)
CTF-430 Tablet & Pen
WEI Score: |
12-27-2010
|
#6 | | Windows 7 Ultimate x64 SP1 |

Quote: Originally Posted by MacGyvr 
Quote: Originally Posted by Dwarf By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account. Ummmm, no. Not true at all. I'm not even sure how you would justify that statement. Try to perform some administrative tasks with a standard user account.
An administrator account (not the built-in Administrator account) is treated the same as a standard user account until the rest of his post. 
Quote: Originally Posted by Dwarf ......Some programs, however, need to be run at a higher privilege level, even when run from an administrator account. In these cases, you need to right-click and select Run as administrator. Depending on the account you are currently using, you will be asked to provide administrative credentials (from a standard account) or confirm that you want to elevate (from within an administrative account). | My System Specs | | System Manufacturer/Model Number Self built custom OS Windows 7 Ultimate x64 SP1 CPU Intel i7-980X 3.3 Ghz (3.48 Ghz OC'd) Motherboard ASUS P6X58D Premium Memory 12 GB (2GBx6) DDR3 PC3-16000 2000 MHz Kingston HyperX Graphics Card Sapphire HD5870 Eyefinity 6 2GB Sound Card Realtek HD Audio ALC889 Integrated Chip Monitor(s) Displays 3x 27" Asus VE278Q Screen Resolution 1920x1080 Keyboard Logitech Cordless Desktop MX 5500 Revolution Mouse Logitech Cordless Desktop MX 5500 Revolution PSU OCZ Series Gold OCZZ1000M 1000W Case Corsair Obsidian 800D Cooling Thermalright Ultra 120 Extreme Copper CPU heat sink w/120 MM Hard Drives 160GB OCZ RevoDrive X2
** 2 x 1TB Samsung HDD HD154UI SATA Internet Speed 50 Mb/s Download and 2 Mb/s Upload Other Info Microsoft LifeCam Cinema
** Lite-On iHBS212 12x BD Writer
** Samsung CLX-3175FW Printer
** Netgear WNDR3800 Router
** Motorola SBG6580 Cable Modem
** 2x APC Back-UPS XS 1500 |
12-27-2010
|
#7 | | |

Quote: Originally Posted by Dwarf From my bookshelf: 
Quote: Originally Posted by Windows 7 Administrator's Pocket Consultant, William R. Stanek, Microsoft Press All applications that run on Windows 7 derive their security context from the current user's access token. By default, UAC turns all users into standard users even if they are members of the Administrators group. If an administrator user consents to the use of his/her administrator privileges, a new access token is created for the user. It contains all the user's privileges, and this access token - rather than the user's standard access token - is used to start an application or process. Yeah that makes sense...., UAC is for program security, and has nothing to do with user rights/permissions which i think mac assumed you were talking about | My System Specs | | OS Windows 7 pro 64 bit CPU Intel Core i7-870 Lynnfield 2.93GHz Motherboard MSI P55-GD80 LGA 1156 Memory Gskill 8 gig, 4x2gig Graphics Card ASUS EAH5850 Sound Card built in HD Monitor(s) Displays HP 23 inch Keyboard Logitech G110 Mouse Razer Death Adder Case Cooler master HAF 932 Cooling 4 case fans, v6 cpu cooler Hard Drives 1tbHDD,500HDD,500HDD,30SSD no RAID... Internet Speed never fast enough |
12-27-2010
|
#8 | | |
Having administrator as you account type means you are a member of the administrative group. Your user account though is still subject to the current UAC settings. The way I understand it, the built in hidden Administrator system account is not, it bypasses UAC. So selecting "run as administrator" bypasses your current UAC restrictions just for that program. | My System Specs | | System Manufacturer/Model Number Me :) It's a model No. 3.1415926 OS Windows 7 Ultimate AMD64 CPU AMD Phenom II X4 980 Black Edition Deneb 3.7GHz Motherboard Asus M4N68T-M V2 µATX Motherboard Memory 8GB 4GBx2 Kingston PC10600 DDR3 1333 Memory Graphics Card BFG NVIDIA Geforce 220GT 1 Gig DDR2 PCIe Sound Card VIA VT1708s High Definition Audio 8-channel Onboard Monitor(s) Displays 2 x 19" I-INC AG191D TFT Flat Panel Screen Resolution 1280x1024 x 2 Keyboard Logitech Internet 600 Mouse Logitech Wireless Trackman Wheel PSU Extreme ATX 450 Watt Model No. RSY-645 Case Power Up Black ATX Mid-Tower Case Cooling Stock heatsink and fan Hard Drives 500 Gig WesternDigital SATA-300 Drive Internet Speed 20 Mbps Down 1 Mbps Up Other Info HP DVD1040e Lightscribe - External USB2 |
12-27-2010
|
#9 | | Windows 7 Professional SP1 - x64 |

Quote: Originally Posted by S35 the "run as administrator" option? If you're the administrator, aren't all programs "run as administrator" by default?
The reason I ask is that I'm trying to delete something via Spybot, and a message appeared on the screen saying I need to run the program as an adminstrator in order to perform the deletion. Asking such question let me think you better "run as administrator", it is only one click to do so...
Therefore the discussion here is interresting and i suggest you to stick with your "standard" account.
There's here plenty of tutorials & discuss about setting & run the OS as "standard" account or (a real) "administrator" account (last one i will not suggest). | My System Specs | | System Manufacturer/Model Number Under Construction [mid-2012] - I'm building a brand new mid-tower (half way done!) OS Windows 7 Professional SP1 - x64 If my user account is the administrator account, why the need for... problems? All times are GMT -5. The time now is 11:25 PM. |  |