Run as Administrator

We have liftoff!!!

I uninstalled everything. Logged in as the standard user. Hit the install package. It begged me for the admin - I responded. Install completed successfully. I went to the shortcut and took ownership of the referenced folder after providing again, the admin password. In the prop panel, the ownership was listed as "\\....Administrator" - and I reassigned ownership to the standard user, HA017. I closed out and rebooted.

Bingo! Standard user now has direct privs into the application - no admin password prompt.

BTW, before I got to this point of uninstall and reinstall, I did try the AppLocker secpol snap in as you suggested. When I called in the default "Path" item, It already populated HA017 as having "Allow" rights along with the Administrators Group and Administrators. With the standard user, this still failed. I went and added the "Everyone" object to "Allow" and tried the standard user. Did not work again.

So, happily, we're back in business and we didn't have to sacrifice security for functionality.

H

I wonder now did I actually do this the correct way, or was I just lucky or ???

H

... and for some reason this isn't made clear in the documentation because...???

By logic (I know, I know...) one would think an Admin (with super-privs) could install an app and then confer downstream priveleges on any account he/she so chooses. What comes first in this sequence - ownership then privs or privs then ownership? Like I say, I just guessed at this because definitive instructions were hard (if not impossible) to find. I hope others will find this thread useful.

(Enjoying my time here on this beautifully run forum. One of the best I've seen. Congrats!)



H

Hi, this was very helpful! I was wondering if there was a way if a standard user can always run a psecific program as Admin without the UAC prompt. There's a program our reception needs that requires it to Admin, but I don't want to give them any extra rights. Is there a way I can 'Whitelist' this program so that it can always run as admin?

I have set up a standard account on my computer for my kids so I can control the times that they can access the computer. One of the online games that they play asks for permission to make changes to the computer, and then asks for my administrator password. I have tried various options from the tutorial to give them permanent permission to this program, but with no joy.

As I understood the reply to one of the questions earlier, there is no way to make it so that this program on a standard account doesn't require a password?

Thank you.

Keith