Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Administrator question

01 Feb 2017   #1
ejdpop

Windows 7 Professional 32-bit Version 6.1.7601 Service Pack 1 Build 7601
 
 
Administrator question

This seems to be an old topic, so I am making a new post. I found the following statement in another thread:

"In Windows 7, even when you are logged in as administrator, UAC no longer gives you “Full” administrator rights."

I have been frustrated by this quite often, as I have administrator privileges, but I frequently have to run as administrator to get past this restriction. Can anybody give a rational explanation for why this change was made?


My System SpecsSystem Spec
.
01 Feb 2017   #2
Brink

64-bit Windows 10 Pro
 
 

Hello ejdpop,

Basically, an administrator account behaves the same way as a standard user except for when a program requires elevated rights to run.

An administrator will just need to approve running the program elevated (aka: "Run as administrator") by clicking on Yes in the UAC prompt.

A standard user will have to provide an administrator's password to approve.

The while point of UAC is for better security by preventing anything from running elevated without first being approved by an administrator.

Why? Anything that runs elevated will have full unrestricted access to everything on the computer, so you don't want something (ex: malware) running elevated without knowing and approving first.

There is the built-in elevated "Administrator" account that has full unrestricted access. It can be used as needed, but it is not recommended for everyday usage for the above reasons.


Hope this helps some.
My System SpecsSystem Spec
01 Feb 2017   #3
Barman58

Windows 10 Pro x64 x2 Windows 10 Enterprise x64, Ubuntu
 
 

the simple reason is that any process including malware runs with the rights of the user that the process is called by.

When the NT range of operating systems was introduced it was decided to make the first user created an administrator account by default.
This did not cause any issues in the original professional market demographic for the OS range The system administrators simply created standard users for all users and kept the administrator for it's intended user, indeed it was normal for admin users to have a standard user account for day to day use and only swap to an administrative user when needed.

Then XP was released and aimed at the home and enthusiast market as well as the existing market, For simplicity it was decided to continue the procedure with the first user being an administrator, (to be honest it has to be that way or the user would be locked out of the system). Unfortunately just at the time that malware got serious, not melting letters in your word processor but emptying your bank account, the were many millions of computer system where if the malware got in it had full rights to do what it needed to do to steal things etc.

Microsoft looked at the issue and came up with a token system where the first user was a hybrid user, it had standard user rights until administrator rights were needed and then could be elevated to admin using UAC, for each operation so that malware was not likely to gain access other than as a standard user so that damage potential is minimised. The dimmed screen you get when elevating to admin lever is running in a separate secure process that is almost impossible for malware to spoof or defeat.

When running as a tokenised administrator you have full administrator rights, Almost, there is a fallback to the old way with the hidden administrator which may be used in emergency situations.

There is also one further anti malware system is use - the program and certain system areas are owned by a special admin user - Trusted Installer , which is positioned above the regular elevated admin level but below that of the Hidden administrator. This user is there to prevent malware that gets invoked by an elevated standard admin user from causing damage.

Basically UAC protects users from common errors that especially these days can cause serious issues
My System SpecsSystem Spec
.

01 Feb 2017   #4
ejdpop

Windows 7 Professional 32-bit Version 6.1.7601 Service Pack 1 Build 7601
 
 
Thank you very much to all who replied!

Three characters.
My System SpecsSystem Spec
01 Feb 2017   #5
Brink

64-bit Windows 10 Pro
 
 

Glad we could help.
My System SpecsSystem Spec
Reply

 Administrator question




Thread Tools




Similar help and support threads
Thread Forum
User Administrator Account won't allow Administrator Privilages
Hi, I'm running Win 7 Pro x64 and Office 2007. I installed a Bluetooth transceiver recently and developed a problem when replying to email in Outlook 2007. When I select an email to reply, the email editor pops up with a "Custom UI Runtime Error in Send to Bluetooth." The solution to this issue...
General Discussion
Administrator and User accounts question
I noticed that when i log into my Administrator account it has different settings and programs and when i go back to my user account it's different as well, is this normal ? I thought everything was the same regarding programs installed etc.. but when you wanted to make changes you had to use...
General Discussion
Administrator Question
Thanks in advance for any help on this • I have 3 computers: Home, Office & Laptop all running Windows 7 Home • I did all the installs myself and set myself up as the only user and as the Administrator • No one else uses these computers My question is, even as an Administrator, I always...
General Discussion
Question about: running in administrator mode
Hello and Happy new Year to you all. I am having some issue running my compute as an "administrator". I know that because when I run CMD in administrator mode, I stay in the user part not on system32 as explained on a post in the forum and I cannot delete some files or folder. Could...
General Discussion
Run As Administrator Question
Hi all, sorry if this is the wrong area for this post, but just need a bit of help with this... I've just moved to Windows 7 after years of XP (I produce music so never fancied Vista) I'm now installing my music software and have done this via the (usually hidden) Administrator account, to...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 21:50.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App