When opening certain folders im asked to type in the admin password to get permanent access to a folder.
Now, my qestion, can i change it so it doesent add a permanent object post (or whatever it's called in english) and instead only gives me temporary access?
Im thinking in the registry or somesuch.
Any help would be mutch appreciated.
I have the same question. I only want TEMPORARY access to the folder (object) so that I can complete a particular task. I DO NOT want PERMANENT access.
It's surprising to me that there isn't more discussion about this particular subject.
It would seem that gaining PERMANENT access to an otherwise restricted object by a limited user would pose an increased security risk on a PERMANENT basis.
That sort of access is really gained by Windows changing the security permissions, adding your user to the ACL so that you now have privileges to see them. "Temporary" access don't make sense at all, since to view the contents you need read permissions, and those don't get away once you leave the folder.
I agree, however, in that the option is totally flawed, as it lets quickly tamper with the permissions of any folder, specially system areas that should not be taken so lightly.
The easiest method would be to use a user that has privileges to view the contents. I think that the built-in administrator account would be OK for such purposes (since it's by default immune to UAC), you can try to fast switch to this account, view/modify the protected folder, then back to your normal account.
Good points, Alejandro85. This is a security hazard for sure. IMHO, MS should somehow enable TEMPORARY access. For example, in the UAC box there could be an checkmark option to disconnect/revoke user privileges on logoff, on reboot, after the object is closed or after a set amount of time like 5 minutes, etc. I'm not an MS engineer, so I can't say whether this would wreak havoc on the rest of the architecture implementation, but if you ask me, it's a good idea.
Quote