If my user account is the administrator account, why the need for...


  1. Posts : 59
    Windows 7 Home Premium 64-bit SP1
       #1

    If my user account is the administrator account, why the need for...


    the "run as administrator" option? If you're the administrator, aren't all programs "run as administrator" by default?

    The reason I ask is that I'm trying to delete something via Spybot, and a message appeared on the screen saying I need to run the program as an adminstrator in order to perform the deletion.
      My Computer


  2. Posts : 9,582
    Windows 8.1 Pro RTM x64
       #2

    By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account. Some programs, however, need to be run at a higher privilege level, even when run from an administrator account. In these cases, you need to right-click and select Run as administrator. Depending on the account you are currently using, you will be asked to provide administrative credentials (from a standard account) or confirm that you want to elevate (from within an administrative account).

    This is part of the improved security in Windows 7, and is designed to make it harder for malware to get on your system. Of course, it isn't infallible, so you must always keep alert.

    This is controlled by means of tokens, and a standard account has just one whereas an administrator account has two, a standard token and an administrative token. In normal use, both types of account use the token with standard privileges. When you right-click and select Run as administrator (see above), you are instructing the program (and that program only) to use the administrator token and to run with full administrative privileges.
      My Computer


  3. Posts : 1,326
    Windows 7 Ultimate RTM (Technet)
       #3

    Dwarf said:
    By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account.
    Ummmm, no. Not true at all. I'm not even sure how you would justify that statement. Try to perform some administrative tasks with a standard user account.
      My Computer


  4. Posts : 124
    Windows 7 pro 64 bit
       #4

    MacGyvr said:
    Dwarf said:
    By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account.
    Ummmm, no. Not true at all. I'm not even sure how you would justify that statement. Try to perform some administrative tasks with a standard user account.
    im thinking he is meaning, the same rights the applications have to run, not necessarily the user rights.
      My Computer


  5. Posts : 9,582
    Windows 8.1 Pro RTM x64
       #5

    From my bookshelf:
    Windows 7 Administrator's Pocket Consultant, William R. Stanek, Microsoft Press said:
    All applications that run on Windows 7 derive their security context from the current user's access token. By default, UAC turns all users into standard users even if they are members of the Administrators group. If an administrator user consents to the use of his/her administrator privileges, a new access token is created for the user. It contains all the user's privileges, and this access token - rather than the user's standard access token - is used to start an application or process.
      My Computer


  6. Posts : 72,712
    64-bit Windows 11 Pro for Workstations
       #6

    MacGyvr said:
    Dwarf said:
    By default, an administrator account behaves in exactly the same way and with the same privileges as a standard account.
    Ummmm, no. Not true at all. I'm not even sure how you would justify that statement. Try to perform some administrative tasks with a standard user account.

    An administrator account (not the built-in Administrator account) is treated the same as a standard user account until the rest of his post.


    Dwarf said:
    ......Some programs, however, need to be run at a higher privilege level, even when run from an administrator account. In these cases, you need to right-click and select Run as administrator. Depending on the account you are currently using, you will be asked to provide administrative credentials (from a standard account) or confirm that you want to elevate (from within an administrative account).
      My Computer


  7. Posts : 124
    Windows 7 pro 64 bit
       #7

    Dwarf said:
    From my bookshelf:
    Windows 7 Administrator's Pocket Consultant, William R. Stanek, Microsoft Press said:
    All applications that run on Windows 7 derive their security context from the current user's access token. By default, UAC turns all users into standard users even if they are members of the Administrators group. If an administrator user consents to the use of his/her administrator privileges, a new access token is created for the user. It contains all the user's privileges, and this access token - rather than the user's standard access token - is used to start an application or process.
    Yeah that makes sense...., UAC is for program security, and has nothing to do with user rights/permissions which i think mac assumed you were talking about
      My Computer


  8. Posts : 4,466
    Windows 10 Education 64 bit
       #8

    Having administrator as you account type means you are a member of the administrative group. Your user account though is still subject to the current UAC settings. The way I understand it, the built in hidden Administrator system account is not, it bypasses UAC. So selecting "run as administrator" bypasses your current UAC restrictions just for that program.
      My Computer


  9. NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #9

    S35 said:
    the "run as administrator" option? If you're the administrator, aren't all programs "run as administrator" by default?

    The reason I ask is that I'm trying to delete something via Spybot, and a message appeared on the screen saying I need to run the program as an adminstrator in order to perform the deletion.
    Asking such question let me think you better "run as administrator", it is only one click to do so...

    Therefore the discussion here is interresting and i suggest you to stick with your "standard" account.

    There's here plenty of tutorials & discuss about setting & run the OS as "standard" account or (a real) "administrator" account (last one i will not suggest).
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:51.
Find Us