Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Run as administrator / disable logon locally

13 Jul 2013   #1

Windows 7 Enterprise 64bit
Run as administrator / disable logon locally


Is there a way to prevent users from logging on locally with a spesific local user (first PC login) but still be able to Run as local user after logged on to the PC with a AD user?

My System SpecsSystem Spec

13 Jul 2013   #2

Windows 8.1 Pro (x64)

To login with Run as requires the ability for one to login into that account locally. You cannot have your cake and eat it as well.
My System SpecsSystem Spec
13 Jul 2013   #3

Windows 7 Enterprise 64bit

Thanks for your reply. Our case is users that have an active directory user that is not local administrator. But they do have access to a local administrator user on the computer that they can use to run or install certain software that needs admin rights, but we do not want them to only login as the local administrator all times, just when they really need it. So f.eks preventing them from reaching printeres or fileshares when logged on as a local user would be nice. Is this possible or is there any better ideas?
My System SpecsSystem Spec

14 Oct 2014   #4

W7 Enterprise

Hi Siberiantiger,
same thing here.

I just want to show an option how to prevent people from logging in with local admin.
We created a domain account and
  • removed this account from domain users
  • add this account to group "local admins"
  • make domain group "local admins" member of local group "Administrators"
  • script runs daily that changes password (14 chars)
  • same script sets the account to expire in 24hrs
  • daily password is listed on an intranet site

Additionally a computer script creates a local admin, renews the random password every 2 Months and pushes the password to a SQL DB - in case of emergency.

I was also interested in how to disable interactive logon preserving the ability to elevate rights with this account. Too bad that this is impossible.

My System SpecsSystem Spec

 Run as administrator / disable logon locally

Thread Tools

Similar help and support threads for2: Run as administrator / disable logon locally
Thread Forum
Remove Administrator icon from logon screen System Security
Hide enabled Administrator count from normal logon screen General Discussion
Delete/Disable Administrator's Account? General Discussion
How do i disable the administrator account. General Discussion
Solved Looking to disable a user accounts interactive logon General Discussion
Disable automatic logon General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:43 PM.
Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33