Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Standard user vs. Administrator in Windows 7

18 Nov 2009   #1
juice13610

Windows 7 Pro (for now, Enterprise soon)
 
 
Standard user vs. Administrator in Windows 7

So we are a company stuck a few years in the past. We give all of our approximate 1,200 users (currently on XP Pro SP 2) admin rights because we have about 5 different computer models at any given time and have 5 images to maintain. With all of the software we have on our network and our limited IS staff (on the support side aside from server guys/network guys/etc, we have 3 service desk guys and 2 desktop support guys in our corporate office, and we have about 10 remote sites and only 5 of them have IS support, mostly with one person or one part-time person at each site), we just can't seem to find that magic bullet for just suddenly taking everyone's admin rights away or just suddenly stop shipping computers with admin rights. With Windows 7, I thought I had seen the light with UAC - ship users their computers with limited user accounts, and remote in to input administrator credentials to install all of their software for them. However, after lowering my UAC level to "Never notify," suddenly I can install Java, Roxio, etc...

So today I attended a 3 hour workshop on Windows 7 and the instructor told me that if you do not use Group Policy to disable the UAC "slider," then user's can install software and do anything else that they want to. That just doesn't sound right to me.

If that's not right, why am I able to install software on my PC as a regular user without inputting admin info?


My System SpecsSystem Spec
18 Nov 2009   #2
Zidane24

Windows 7 Home Premium x64 - Mac OS X 10.6.4 x64
 
 

Quote   Quote: Originally Posted by juice13610 View Post
So we are a company stuck a few years in the past. We give all of our approximate 1,200 users (currently on XP Pro SP 2) admin rights because we have about 5 different computer models at any given time and have 5 images to maintain. With all of the software we have on our network and our limited IS staff (on the support side aside from server guys/network guys/etc, we have 3 service desk guys and 2 desktop support guys in our corporate office, and we have about 10 remote sites and only 5 of them have IS support, mostly with one person or one part-time person at each site), we just can't seem to find that magic bullet for just suddenly taking everyone's admin rights away or just suddenly stop shipping computers with admin rights. With Windows 7, I thought I had seen the light with UAC - ship users their computers with limited user accounts, and remote in to input administrator credentials to install all of their software for them. However, after lowering my UAC level to "Never notify," suddenly I can install Java, Roxio, etc...

So today I attended a 3 hour workshop on Windows 7 and the instructor told me that if you do not use Group Policy to disable the UAC "slider," then user's can install software and do anything else that they want to. That just doesn't sound right to me.

If that's not right, why am I able to install software on my PC as a regular user without inputting admin info?
Your PC at work or at home...

Were you logged into a limited account when installing the software? If you are logged in as an Administrator than UAC will either notify you when an app is trying to access System files or needs to be elevated to access critical components...
My System SpecsSystem Spec
18 Nov 2009   #3
kegobeer

Windows 7 Ultimate x64 SP1
 
 

To piggyback on Zidane's post - the first user created by Windows 7 is an administrator. I can change any settings I want, and the UAC prompt will not ask for a password. If I am logged on as a non-administrator, the UAC prompt will ask for the admin name and password. Just like in XP, if you do not have admin rights, you cannot install software that requires access to protected files and folders.
My System SpecsSystem Spec
19 Nov 2009   #4
juice13610

Windows 7 Pro (for now, Enterprise soon)
 
 

Thanks for your responses.

The first user created was a local admin, just "Joey." I then joined the domain and started logging in with my domain account, and made my domain account a regular user. I dropped the slider to "never notify" and was able to install Roxio and Java.

Just to confirm that nothing else was awry, I tried changing date/time settings and accessing Device Manager. The date/time settings flat out denied me, and the DevMan just alerted me that while I can view it, I can't make any changes.
My System SpecsSystem Spec
19 Nov 2009   #5
kegobeer

Windows 7 Ultimate x64 SP1
 
 

I haven't done enough research about domain and UAC to understand why a standard domain user has full access to UAC, when a non-domain machine standard user cannot change UAC settings. I guess you'll have to use the group policy editor to disable the UAC slider.
My System SpecsSystem Spec
Reply

 Standard user vs. Administrator in Windows 7




Thread Tools





Similar help and support threads
Thread Forum
How to Change to Administrator from Standard User?
I'm at a loss as to becoming the Administrator of my own machine. I guess I'm now a "a standard user" even though I built the machine and am the only user of it. I guess I never realized or knew how to make myself the admin for the machine. Now I cannot "own" files to make changes because I'm not...
System Security
Relationship between standard user, administrator user and UAC
There has long been, and I guess still is, advice to use a standard user rather than administrator account to limit the things that can be done by malware. Until recently I've always used an administrator account despite this advice. After recently seeing a report stating that an extremely...
System Security
How to be administrator if I had standard user
Hey mans, I am new in this forum or on this forum(s) My problem is I disable my Administrator accaunt and now I have one accaunt my accaunt and I am standard use.. when I try back my administraotor accaunt say: Acces denide... and any changes I try make my UAC is just let me to click No... I...
General Discussion
How to allocate Administrator permission to Standard User for Windows
We have an application(Myapp.exe), which is runs under administrator account properly( as it edit/update/write DLL in registry). But due to to security resons we dont want to provide Admin password to all users, and we want to run application under Standard User ( member of Users group only). I...
Software
How do I as administrator share the addressbook with a standard user
While moving my programs and records from an old XP-PRO system to a new Windows 7 system, everything went into my administrator account. How do I share things like internet explorer and the address book with all (or a specific) user account? :( Joe Christensen
General Discussion
Switching From Administrator to Standard User
I have Windows 7 Professional x64. There are three user accounts: Daddy - Administrator...this is my account; Child - Standard User; and Visitor - Standard User. (These are not the accounts' real names.) I really should be a Standard User for day-to-day computing. There are two ways I...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:42.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App