impossible to change privilege level of an app ?

[hackerman1]

hi !

about secpol: doesn´t that change with the UAC-settings ?
i have UAC at max. (top).

checking whoami on both W7 & WS2008 later today...

 

[TimStitt]

hi !

about secpol: doesn´t that change with the UAC-settings ?
i have UAC at max. (top).

Apologies for not being clearer, let me try again.
I understand that you began to receive a UAC prompt when starting A2 and this was not previously the case. Secpol is the security policy, the entries referring to User Account Control (UAC) 'do' affect the way that UAC behaves. By asking you about this I'm trying to ascertain whether your security policy has changed and if this is what is causing the prompt when you run the software.

To me, your security policy doesn't match mine and I've never changed anything manually. So why is it so? I wonder...

• Have you changed this previously?
• Did (for an unknown reason) mine install with different default settings to yours?
• Has either of our security policies changed automatically since install (due to 3rd party programs changing the settings, new security templates, Windows Update, domain policy, group policy etc)

If yours has changed, it may explain why UAC is prompting you. Although keep in mind our other talk about tokens and folders that require higher permission. You may be experiencing the result of a combination of issues. As we rule out each one I hope to be left with the answer.

 

[hackerman1]

i understand what secpol is, i think you misunderstood ME.

when i said "about secpol: doesn´t that change with the UAC-settings ?
i have UAC at max. (top).", i meant those 2 settings you asked me about:

"Behavior of the elevation prompt for administrators in Admin approval mode"
is set to: "Prompt for consent on secure desktop"

"Behavior of the elevation prompt for standard users" is set to:
"Prompt for credentials on secure desktop"

maybe those 2 change when you change UAC-settings ?

checking later...

 

[TimStitt]

Ah, I didn't know which UAC settings you meant. I think I understand you now.
To clarify. if you change the UAC settings to the "top" of the slide bar, i.e. "Always Notify"?

Then the answer is "yes", secpol settings for UAC do change. I've now changed mine, see the print. I'll leave mine this way for a while for some hands on experience in how it changes my day to day usage.

Will let you know if I learn anything.

 

[hackerman1]

"Ah, I didn't know which UAC settings you meant."

what other are there ?

 

[TimStitt]

The ones in Secpol that I was talking about. lol..

 

[Barman58]

The way I understand things is the settings in the UAC slider set "when" the UAC is enforced - Program activity only, User activity and Program activity, Etc. whilst the Secpol settings control how the prompt needs to be actioned - password required for admin, Secure desktop etc..