Well, a little bit, but you're still not running as SYSTEM. That would be root.
I think the reason people are doing this is because it would be like running as a normal user,
then a dialog [like kdesudo] pops up for small things, but if you want to make a symlink in a location
you don't own, then it would just tell you that it doesn't work, no sudo dialog at all.

Think about your analogies before you say them, or else you end up looking worse than if you did it yourself.

Yes, I've done this, but I don't use it all the time, I just login to it whenever I need to.


Clint

I never asked for this. I never complained about the way XP handled/didnt handle this. The default way Vista handles this is the most annoying thing Ive ever experienced on a pc... yes, even more annoying than a trojan or virus, which I can count on 1 hand the number of those Ive gotten in 20 years. I hate it, so its gone. This is my own system, in my own house, with my own self.

I think that's really dependent on the user. For example, I never complained about XP's security or stability. I think it's pretty solid on both if your a smart user. Hell, I myself go to those "questionable" websites and I've never been infected. Because I can take care of my computer, hardware and software side. On the other hand, I have friends who need my help in fixing their computer often. For them Vista's UAC would be a boon. A huge boon. For me, it's a pain in the ass and I'm glad I dumped it.

Thanks all.

I've never complained about XP either, and a choice has to be made in Vista's way of controlling users and everyone is free to use whatever he/she likes and be responsible for any result.

I am using Home Premium and I decided to set ConsentPromptBehaviorAdmin=1 so that it actually asks for password instead of Ok/Cancel prompt.
I decided to go this way since I found myself clicking Allow sometimes without reading the prompt, when I was in middle of something.

Wow. So you made it even more annoying. What are all these prompts you're getting that you werent expecting? Are you in the KGB? CIA? Interpol? MOSSAD? Scotland yard?

So I have followed the instructions, working great.

But I have one issue:
Is it possible to change the name of the "\Users\Administrator" folder to per example "\Users\SYSOP" ????
Why would I do that?
Because I have a lot of shortcuts, setups and settings that use the folder "\Users\SYSOP".

I have managed to just rename that folder from another account, but then after restarting Vista seems to not "find" my account "Administrator" and create a temporary account.

-

Oh, I managed to solve this myself :-)

After the
3- Set "Accounts: Administrator account status" to Enabled

I also opened

Set ”Accounts: Rename administrator account”

and changed the name to SYSOP


When restarting Vista the new Administrator account's folder name under C:\Users was SYSOP.

This approach MUST be done when you enable the built-in Administrator account for Vista for the FIRST time.

-

Ahh I love this, I feel like I am flying in Windows now...before anything I would do it would ask me for permission even with UAC disabled.

THANKS!

how do you create batch files to give certain programs the admin power they need to execute?
and what type of "various tools" do you use?
thanks

Just reformatted and did a fresh install. Gotta say thanks for a great tutorial! No longer annoying to use Vista Home Premium.

I've used XP as administrator since the beginning. Had a virus one time in more than 5 years. In XP (and now in Vista Home Premium) I use AVG Anti Virus, Spyware Blaster, AdAware SE and regularly do a full scan with Windows Defender.

Damn, I dont understand why you people feel the urge to turn off security features..
Still everyone to thier own

Simply because anyone with experience is going to get quicky frustrated having to click yes to every change they make.

I understand the theory about protecting your pc but to be honest the amount of pop ups vista has is ridiculous and could even cause inexperienced users even more problems. I know my Mum would be ringing me every 10 minutes!

thx for sharing.Im a new member be here and wish get more infos ,thats great.

alright i just did this and i want to delete this account named "administrator" but I don't know how... can anyone help?

1- Click Start, and type "secpol.msc" in the search area and click Enter. (You may receive a prompt from UAC, approve/login and proceed)
2- In the left list, choose "Local Policies", then "Security Options"
3- Set "Accounts: Administrator account status" to Disabled.

Note that doing so will undo the new behavior, if that what you want to do.

Hello.

Firstly thanks Tantawi for the useful guide, however:

From what I can see running Vista HP in this Administrator account is pretty much the same as the Admin account created during setup, with the exception it disables UAC.

* I still cannot rename notepad.exe to notepad2.exe as I could in XP under Admin, admittedly I cannot think of a reason I'd ever want to muck about with SYSTEM32 files but still.
* I still cannot gain access to folders such as "Documents and Settings" without taking Ownership of them which annoyingly doesn't propagate down to all subfolders even though I set it to, and even then on some folders that isn't working.

Is there a way of setting Vista "exactly" how Admin worked in XP? So you have cart blanch? I'm having to amend each folder I get access denied on and giving my own permissions back to me.

Cheers

Brad.

p.s - Keep up the good work

Another reason to use the proper Admin account is you UAC is completely disabled but you can still enable it so as to keep Windows Security Center happy. If you just disable it via the "Users" GUI front end WSC starts complaining it's switched off.

I fail to see how UCA is any use for System Admins anyway (it's definitely useful for Standard Users) as an Admin will know what he's doing anyway and will just click Continue making the prompt pretty useless. AFAIK it has no effect on Hackers, Viruses or Spyware and is purely a User Access Control. For example: I know full well meddling with the options in the System window (in Control Panel) can do damage but I also know how to use it.

Like I said UAC from what I understand it is a User not Hacker prompt, unless I'm mistaken? . That said disabling UAC does disable Internet Explorer 7's Protected Mode, which doesn't interest me much as I don't use it anyway.

There is no folder named Documents and Settings in Vista!

You're mistaken, like XP you need to enable "Hidden and System Files" from Options . Trust me it's definitely there. "ProgramData" seems to be both "All Users" and your current User mixed together. Then there is also "Users" I've not figured out how it and ProgramData differ yet.

I only bought my new Vista HP Laptop today and have spent the evening working out how to gain access to my folders

Hi bradavon,

Congratulations on your new laptop, and welcome to Neowin

You may be looking to this tweak:

From: http://www.neowin.net/forum/index.php?showtopic=499870

Good luck

Hello Tantawi, thanks for the welcome.

Thanks for that reg fix. It looks like it adds a context menu which dumps you at a DOS command prompt. It's a start but I'd prefer a Full Admin account like XP.

Even if I didn't use it all the time it would be nice to know it's possible. For example I've not worked out how to be able to rename files in the WINDOWS\SYSTEM32 folder (unless I take ownership of that too) which you may need to do if you need to delete/rename a system file.

Has anyone worked how to do this? Surely it's possible. I believe the difference here is the Administrator account (the proper one) in Vista still doesn't own certain folders, they're owned by the SYSTEM account (which cannot logged in with) as opposed XP where you own each and every folder.

That thread is great though, it's chocker block with goodies. I'll have to get reading

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Can I suggest you add a disclaimer to your first post explaining disabling UAC takes Vista's IE7 Protected Mode with it.

This basically lowers IE7 to a Limited User (lower than the Semi-Admin you're logged in with). This is something IE7 users may not be aware of, even if you enable Protected Mode from Internet Options it stays disabled (just like UAC). There is a fix however.

If you want UAC disabled but Protected Mode on use DropMyRights which was written for XP but works just the same in Vista (I tested it last night), not only that but using it actually turns Protected Mode back on (i.e - instead of saying Protected Mode: Off it will say On). Therefore proving Protected Mode and DropMyRights are on and the same thing.

What is DropMyRights I hear you say, read on: http://msdn2.microsoft.com/en-us/library/ms972827.aspx

It was written by a Microsoft bloke but isn't officially supported. I use the /c switch to make it even more secure. I've been using it for months and bar ActiveX installs (which need admin rights) not one website has fallen over. You can prove it works by trying to save a file into the SYSTEM32 folder, it won't let you.

The great thing is it's completely seamless, works on XP or Vista (probably 2000 too) and lets you get the good bits out of UAC without the bad. Just set the shortcut for each Internet enabled program to use it and make sure you choose Open "Minimised" and it's seamless.

Here is a few other methods for disabling the Built-In Administrator Account.

http://technet2.microsoft.com/WindowsVista...3.mspx?mfr=true

I recently switched to Linux at work. I'm trying to get hold of
Vista but somehow I can't. Dunno why.



_______________
Leo
Download Prima user's manuals

Wow thanks, iv been wanting to use the admin account for so long fed up of everything poping up in my face now i feel i have more control over the system then it having more over me

Wonderful guide.

Curious though, is there any way to remove the "run as administrator" function on context menus, since there's no longer any use for it(Or is there)?

If It involves resource hacking, it doesn't matter. I want to leave my Vista 'un-hacked'. >.>

@bradavon: I still can't figure out how to do that too. I added the bit about IE7 to the first post, I didn't notice it since I don't use IE thanks a lot.

@neospyce: Thanks for the link!

@Sniper101 & jamesyfx: You're welcome! I don't think there's a way to remove "Run as admin", but if you found a way let us know

Merge "RunAsAdmin_Exe-.reg" to remove the "Run as Administrator" Context Menu Item from all exe files.
Merge "RunAsAdmin_Exe+.reg" if you want to restore the "Run as Administrator" Context Menu Item.

Click to view attachment

I created these regfiles for the Take Ownership Context Menu Item.

   

More info @ Vista - Tips, Tricks & Tweaks.

Perfect Herby . Thanks.

Sweet.

Heres a nice little tool:
http://www.tweak-uac.com/

Absolutely brilliant. Much appreciated!

thnks
this is really helpful

Thanks man, nice thread! Thanks for the excellent tutorial.

No worries, glad I could help. If you like you can delete my ramblings above the main point of my post. The important part is when I discuss DropMyRights.

I too don't use IE but on occasion you have to when the site isn't FF compatible, or the you come across the odd site that uses ActiveX.

Is there a way to REVERSE this ?
I must admit, I've rarely used the "Administrator" log in, and only then by accident.
I'd like to go straight to my Phil K account.
How do I get shot of this ?

Yes there's!

1- Click Start, and type "cmd" in the search area, right click on "Command Prompt" and select 'Run as Administrator".

2- In the command prompt type "net users Administrator /active:no" (Note the capital "A" in Administrator) and press Enter, you will get a confirmation as "The command completed successfully".

Reboot and it'll go to the active account directly

Welcome everyone.

Cool. New little bit there.

Worked beautifully.
Thanks !

cool, thanks!!

thx for the information.

now i just gotta figure out why Vista powered down (or sleep?) my PC last nite even though I put it on high-performance. stupid power management.

I know that the point of this tutorial is to move the annoying messages that warn you about almost every top level action you attempt, but after careful consideration, I think it's a good idea to be warned. Windows XP (mostly before SP2), was a completely in-secure file system with regards to administrative permissions. User accounts in both the Home and Professional editions of Windows XP were by default given administrative permissions over the system they presided in.

I think Microsoft has made a smart move by ensuring that users aren't able to harm them-selves. I understand there are those of you out there who are obviously careful and cautious enough to be able to take care of yourselves, but the majority is often the dumber fraction.

Too bad that while being the admin you can't make another account an admin. Even though my account is labeled as an admin, I don't get full privileges.

Wonderful guide, thanks to all of you...

You are the man, Evrywhere i go Tantawi is the Best!

Hey

This doesnt seem to work very well. Everytime I try to copy and then paste something in Program Files it never allows me even if I say yes to the UAC prompt. While in my original admin account when I installed Vista, I could.
Why?

This is the only thing I dont like

Can't you set it to run on start up and be done with it?

After applying this

If I run a .exe, does it run the same as Right Click-Run As Admin but without the UAC popup?
If I want this mode but still want the UAC popup, is there a fix?

I tried this but it always gives me a invalid path....
it says C:\programs doesnt exist.

Thanx for all the info m8...

yeah currently I use a real admin account with no UAC at all however I think UAC is a good idea as it follows the unix motto of trying to keep things running in limited priviledge mode. So I do plan at some point to move back to a UAC environment on my vista box and work around the non admin mode problems I had.