Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Run as administrator / disable logon locally

13 Jul 2013   #1

Windows 7 Enterprise 64bit
Run as administrator / disable logon locally


Is there a way to prevent users from logging on locally with a spesific local user (first PC login) but still be able to Run as local user after logged on to the PC with a AD user?

My System SpecsSystem Spec

13 Jul 2013   #2

Windows 10 Pro (x64)

To login with Run as requires the ability for one to login into that account locally. You cannot have your cake and eat it as well.
My System SpecsSystem Spec
13 Jul 2013   #3

Windows 7 Enterprise 64bit

Thanks for your reply. Our case is users that have an active directory user that is not local administrator. But they do have access to a local administrator user on the computer that they can use to run or install certain software that needs admin rights, but we do not want them to only login as the local administrator all times, just when they really need it. So f.eks preventing them from reaching printeres or fileshares when logged on as a local user would be nice. Is this possible or is there any better ideas?
My System SpecsSystem Spec

14 Oct 2014   #4

W7 Enterprise

Hi Siberiantiger,
same thing here.

I just want to show an option how to prevent people from logging in with local admin.
We created a domain account and
  • removed this account from domain users
  • add this account to group "local admins"
  • make domain group "local admins" member of local group "Administrators"
  • script runs daily that changes password (14 chars)
  • same script sets the account to expire in 24hrs
  • daily password is listed on an intranet site

Additionally a computer script creates a local admin, renews the random password every 2 Months and pushes the password to a SQL DB - in case of emergency.

I was also interested in how to disable interactive logon preserving the ability to elevate rights with this account. Too bad that this is impossible.

My System SpecsSystem Spec

 Run as administrator / disable logon locally

Thread Tools

Similar help and support threads
Thread Forum
Remove Administrator icon from logon screen
I started this question at the “Built-in Administrator Account - Enable or Disable” forum where it was suggested I move it here. I have a Toshiba laptop with Windows 7 32-bit. When I first got this laptop many months ago, I needed to perform some action (I do not remember the details) which...
System Security
Hide enabled Administrator count from normal logon screen
I want to leave Administrator enabled but I do not want to see the Administrator account show on the normal Logon screen. I only want to see it if I boot to Safe Mode like XP Home used to do? Possible? No ... I DO NOT want to disable Administrator.
General Discussion
How do i disable the administrator account.
Im currently using a standard user account.Ive tried the elevated command prompt net user administrator/active:no command and it said the command had completed successfully.But i can still access the administrator account at log on. Any ideas please how i can disable the admin account and just...
General Discussion
Cannot disable administrator login in Win7
i had use ' net user administrator /active:yes ' to enable admin login.. but now that i want to disable it, when i enter ' net user administrator /active:no ' in command prompt, the following reply is displayed - system error 5 has occured. access is denied.
General Discussion
Looking to disable a user accounts interactive logon
Ultimate SP1 here. Just curious if this is possible. I moved in with some roommates and I wanted to allow them access to some file shares on my PC across our LAN. Since it prompts on their end for authentication, I didnt want to supply my logon, as that would allow write access to the files...
General Discussion
Disable automatic logon
Few days ago my user account started to automatically logon. Before that I didn't have password, but I had to click on my username to start. I didn't change anything, or at least I didn't intentionally. When I go to netplwiz, option "users must enter a user name and password to use this computer"...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 13:28.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App