Re: Use of credentials with UAC in vista


"kapibarra" <k@xxxxxxxx> wrote in message news:g8eq39$6gb$1@xxxxxxxxxxxxxxxxxx
I had UAC turned off. I tried to run a command (eventcreate) under a user's account, from a command prompt with 'run as administrator' privledges, and it failed saying access denied. The user's account has power user permissions.

There are only two accounts that mean anything on Vista. Admin user and Standard user, from a user's standpoint.

There is no more Power User on Vista, as stated in the article.

<http://technet.microsoft.com/en-us/magazine/cc160882.aspx>

So I logged in as admin and turned UAC back on, rebooted, logged back in as the user, ran the command again, and it prompted me for credentials. So I put in the admin credentials, and it ran the command. Then I logged in as admin, disabled UAC, rebooted, logged in as user, and now it runs the command, whereas before it did not run the command in the user's account. My question is why is it behaving differently now than it was before? UAC hasn't cached the admin credentials, has it? If not, then can someone please explain to me why it now works?

An admin on vista is locked down to a Standard user secuirty token, until such time it needs to use the Admin Full rights Secuirty token, the the admin's rights are ecalated to Full Admin rights, as being discussed in the links.

http://news.softpedia.com/news/Admin-Approval-Mode-in-Windows-Vista-45312.shtml
http://technet.microsoft.com/en-us/library/cc709691.aspx

There is another account on Vista that has Admin Full Rights on Vista, with UAC enabled.

<http://www.computerperformance.co.uk/vista/vista_administrator_activate.htm#Summary_of_Vista_Administrator_-_Super_User_(Hidden_Account)>

.

Relevant Pages

  • Re: whats the difference between account NAMED administror and a account with admin privilegious?
    ... The link has a lot of information and directions on sharing in Vista. ... Using the Vista Administrator account does give you greater access while ... I was hoping that being the 'administrator' would cure that problem. ... When logging in....I should select 'admin' ...
    (microsoft.public.windows.vista.general)
  • Re: Use of credentials with UAC in vista
    ... user's account, from a command prompt with 'run as administrator' privledges, and it failed saying access denied. ... The user's account has power user permissions. ... There is no more Power User on Vista, ... It also appears from reading the above article that it did indeed cache my admin credentials. ...
    (microsoft.public.windows.vista.general)
  • Re: VIsta IE5 / IE7 problem...
    ... There is no \D and S in Vista - it is ... A few things to try - run the install at an elevated administrative ... This account is equal to the 2-token admin in XP. ...
    (microsoft.public.windows.vista.general)
  • Re: writing to registry in vista from guest account
    ... After the installation I create new user/guest account and runs the ... Is there a way to write to a HKLM key which was created in admin ... are not user-admin accounts with UAC ... and how Virtualization works on Vista with UAC. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: admin password
    ... If you only have one account on the computer, it is an admin account, ... Go into System Preferences> Accounts. ... This involves some use of the command prompt and restarting the computer ...
    (uk.comp.sys.mac)
Loading