Nope.  We log in with normal user accounts.  Definitely a division of 
permissions.

@Charles - There are a number of local policies in the UAC area that are 
enabled:

Admin Approval Mode for the Built-In Administrator account
Detect application installations and prompt for elevation
Only elevate UIAccess applications that are installed in secure locations
Run all Administrators in Admin Approval Mode
Virtualize file and registry write failures to per-user locations

Behavior of the elevation prompt for admins in Admin Approval Mode  -- Prompt 
for consent
Behavior of the elevation prompt for standard users - Prompt for credentials

All other UAC settings are disabled.

From: [email protected] [mailto:[email protected]] On 
Behalf Of Kennedy, Jim
Sent: Thursday, September 21, 2017 12:12 PM
To: [email protected]
Subject: [NTSysADM] RE: Running RSAT tools elevated

Are you logged in with a local admin account?  Perhaps that is fooling UAC?

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Heaton, Joseph@Wildlife
Sent: Thursday, September 21, 2017 11:46 AM
To: [email protected]<mailto:[email protected]>
Subject: [NTSysADM] RE: Running RSAT tools elevated

My UAC was turned all the way up.  I brought it down one notch to match your 
setting, and rebooted, but double-clicking the shortcut on my desktop still 
just opens the app directly, no asking for creds.

Shift-right-click does work, but I really don't want to have to do that every 
time.

In Win7, I would double-click the icon, and UAC/Viewfinity would ask for 
credentials.  I thought all I did was go into Advanced for the shortcut and 
check the Run as Administrator box, but that's not working for me now.

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Kennedy, Jim
Sent: Thursday, September 21, 2017 8:11 AM
To: 'NT System Admin Issues Discussion list' 
<[email protected]<mailto:[email protected]>>
Subject: [NTSysADM] RE: Running RSAT tools elevated

Is this a UAC setting issue?  I just click and it asks. Mine is set to 'Always 
notify, do not dim'.

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Heaton, Joseph@Wildlife
Sent: Thursday, September 21, 2017 9:48 AM
To: 'NT System Admin Issues Discussion list'
Subject: [NTSysADM] Running RSAT tools elevated

So, in Win 7, I had installed RSAT tools, and I had the shortcuts setup so that 
when I double-clicked it, it would run as administrator, I'd be prompted by my 
privilege elevation software, put in my admin credentials and away I went.  I 
did not have to use the runas command in the shortcut to make this happen.  
Now, in Win 10, I can't for the life of me get this working.  If I go to the 
Advanced button in the shortcut, and choose Run as Administrator, nothing 
happens.  The tool opens using my logged in credentials, not prompting me for 
my admin creds.  If I do put in the runas command, I end up having to enter my 
credentials twice, once for my privilege elevation software, once in a command 
window that opens up.

Anyone know of a better way of doing this?

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  916-323-1284


Reply via email to