Windows 8- Run everything as Administrator

[nekrosoft13]

had it off on all PCs (4-5 pcs) every since it was introduced was it in XP or vista?

I do monthly backup of C drive, thats all I need. never needed system restore though all these years, don't need a useless service to steal gigs of hdd/ssd space and slow down the hdd/ssd.

if you know how to use your PC you will never need it.

had to restore C drive one time, because blu-ray drive was slowing down to 2.8x while burning, realized what was causing it, uninstalled daemon tools and problem solved.

[Wakers]

Sigh. You should not disable UAC. Just learn to live with it. If you find it that irritating you have a medical problem with your temper that you should probably get checked out.

[BajiRav]

First thing I do after installing Windows is disable User Account Control. It's completely useless if you know what you're doing, and it's annoying to allow a program you trust every single time you launch it. Now if it had a "remember this choice" option then I might leave it on.

if you knew what you are doing, you wouldn't actually disable it.

[Innuendo]

A person who wants to run as administrator full-time with UAC turned off is the equivalent to the Linux user who wants to run everything as root.

[Arceles]

A person who wants to run as administrator full-time with UAC turned off is the equivalent to the Linux user who wants to run everything as root.

If you really knew what root means on linux... no, root is by far more powerful on linux that just disabling UAQ on windows.

P.D. System Restore/UAQ/Defender always disabled on first boot, that's just pure rubbish going on there.

[Arceles]

Actually, as it turns out, what I posted will also break the Microsoft Store. I practically never disable UAC and was unaware of this limitation.

If you entered my registry change to disable UAC, re-enable it with the following command:

PowerShell as Administrator (This requires a restart)

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -Value "1" #Default value is 1

shutdown -r -t 0[/CODE]

To enable automatic silent UAC elevation for administrators without breaking the Microsoft Store you should do the following instead.

[i]PowerShell as Administrator (This takes effect immediately)[/i]

[CODE]
#The following is equal to the Security Policy "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" = "Elevate without prompting"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value "0" #Default value is 2

#The following is equal to the Security Policy "User Account Control: Allow UIAccess applications to prompt for elevation without using the secure dekstop" = "Enabled"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableUIADesktopToggle" -Value "1" #Default value is 0[/CODE]

Thanks, this was much needed.

[nekrosoft13]

Actually, as it turns out, what I posted will also break the Microsoft Store. I practically never disable UAC and was unaware of this limitation.

If you entered my registry change to disable UAC, re-enable it with the following command:

PowerShell as Administrator (This requires a restart)

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -Value "1" #Default value is 1

shutdown -r -t 0[/CODE]

To enable automatic silent UAC elevation for administrators without breaking the Microsoft Store you should do the following instead.

[i]PowerShell as Administrator (This takes effect immediately)[/i]

[CODE]
#The following is equal to the Security Policy "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" = "Elevate without prompting"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value "0" #Default value is 2

#The following is equal to the Security Policy "User Account Control: Allow UIAccess applications to prompt for elevation without using the secure dekstop" = "Enabled"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableUIADesktopToggle" -Value "1" #Default value is 0[/CODE]

will that run all apps with admin rights automatically?

[AngelGraves13]

if you knew what you are doing, you wouldn't actually disable it.

Well you can't disable it anyway on Windows 8, so who cares?

I only install Steam with its games, Office, Diskeeper, and a few other essential programs. I never install anything else.

[remixedcat]

I'd like to be able to run metro start screen apps as the built in admin acct..... I hate UAC prompts

[HawkMan]

I can't beleieve the ignorance from the UAC thread is still alive here.... It's mind boggling, and scary since a lot of these people think they are IT pros....

As for system restore, how exactly does it reduce the performance of your HDD it only creates new restore points on bigger installs hat specifically requests it or during idle time at certain intervals. And it can have your computer back up and running in 5 minutes instead ofm15+ when your awesome AVG yet again tags an important system file as a also positive and breaks windows.

[Arceles]

I can't beleieve the ignorance from the UAC thread is still alive here.... It's mind boggling, and scary since a lot of these people think they are IT pros....

As for system restore, how exactly does it reduce the performance of your HDD it only creates new restore points on bigger installs hat specifically requests it or during idle time at certain intervals. And it can have your computer back up and running in 5 minutes instead ofm15+ when your awesome AVG yet again tags an important system file as a also positive and breaks windows.

Seriously if you think you can't live without UAC then leave turned it on, but don't ask people that knows what's doing to do the same as you.

[Sranshaft]

I'd also like to know how to do this..

I play UT2004 and what I noticed from switching to Windows 8 is that if I don't run the game as admin, and I make changes to my settings, server favorites, etc.. my config files (ini's) are updated and saved to "C:\Users\{Username}\AppData\Local\VirtualStore\UT2004", instead of being directly updated/saved in the the directory where the game is installed.

Blame the developer for that and not Windows 8 / Microsoft. The User folder is there specifically for these sorts of things. The only thing that should be in the Program Folder is the application itself and dependencies.

[HawkMan]

Seriously if you think you can't live without UAC then leave turned it on, but don't ask people that knows what's doing to do the same as you.

The thing is, none of the people in these threads who think they know what they're doing and what UAC is doing knows what it's doing, which is painfully obvious fromtheir psts about what they think UAC is doing. I don't care if they turn it off, I care about them spreading their ignorance about UAC to other people.

Just set it to silent.

[nekrosoft13]

I can't beleieve the ignorance from the UAC thread is still alive here.... It's mind boggling, and scary since a lot of these people think they are IT pros....

As for system restore, how exactly does it reduce the performance of your HDD it only creates new restore points on bigger installs hat specifically requests it or during idle time at certain intervals. And it can have your computer back up and running in 5 minutes instead ofm15+ when your awesome AVG yet again tags an important system file as a also positive and breaks windows.

seriously, if you don't know how to use your PC, leave it on. but don't complain when people that do know how to use thier PC want it off.

[HawkMan]

seriously, if you don't know how to use your PC, leave it on. but don't complain when people that do know how to use thier PC want it off.

it has nothing to do with knowing how to use your computer.

but you and all the other anti UAC people are still reiterating ignorance from the first posts of the UAC thread. and you guys STILL have no clue how UAC works and what it actually does. I suggest you read the UAC thread and learn some stuff

And I can guarantee you not only do I know how to use my PC. I have far fewer issues with mine.

[Noir Angel]

blah

Given more than 10 years of PC usage, i'd say it's had enough time. I store my data on other drives, and if my install goes bad I just format. I've tried using system restore before and it's never solved my problems.

Blame the developer for that and not Windows 8 / Microsoft. The User folder is there specifically for these sorts of things. The only thing that should be in the Program Folder is the application itself and dependencies.

Given that UT2004 was developed before UAC was even invented you can't really blame the developer. It's Microsoft's fault that UAC sandboxed applications behave in illogical ways. Windows should be capable of detecting which applications are and aren't UAC compatible and act accordingly.

[BeerFan]

it has nothing to do with knowing how to use your computer.

but you and all the other anti UAC people are still reiterating ignorance from the first posts of the UAC thread. and you guys STILL have no clue how UAC works and what it actually does. I suggest you read the UAC thread and learn some stuff

And I can guarantee you not only do I know how to use my PC. I have far fewer issues with mine.

Just for curiosity's sake, why are you such an advocate of UAC? I mean, I know it should be in place for the average user, but you seem to think that techs should leave it on as well. Why?

Edit: this topic should probably be in the main Windows Support and Discussion forum.

[Denis W. Veteran]

I'd also like to know how to do this..

I play UT2004 and what I noticed from switching to Windows 8 is that if I don't run the game as admin, and I make changes to my settings, server favorites, etc.. my config files (ini's) are updated and saved to "C:\Users\{Username}\AppData\Local\VirtualStore\UT2004", instead of being directly updated/saved in the the directory where the game is installed.

Taking a rough guess here, but that's probably happening because your user account doesn't have write permissions to the UT2004 folder. Try adding your user account to the Security tab and give yourself full control of the folder. Then hit Advanced, click Change Permissions, and then tick the box at the bottom.

I just booted up my old dusty copy of UT2004 and verified it's writing to its own folder.

[HawkMan]

Just for curiosity's sake, why are you such an advocate of UAC? I mean, I know it should be in place for the average user, but you seem to think that techs should leave it on as well. Why?

Edit: this topic should probably be in the main Windows Support and Discussion forum.

Read the UAC thread as it's been explained about a few thousand times in that thread. and there's absolutely no reason today to turn off UAC or system restore.

as for system restore not ever fixing your problems, probably because you disabled it :p nearly every problem I've seen on a client computer that didn't completely kill the computer, was fixed by system restore, and one those it didn't it would have if they hadn't had an expert in the family who had disabled it, making the whole thing requires 4+ times as much work and money. I've fixed my own computer with System Restore in the past as well during a windows update gone wrong and a driver update that failed.

Taking a rough guess here, but that's probably happening because your user account doesn't have write permissions to the UT2004 folder. Try adding your user account to the Security tab and give yourself full control of the folder. Then hit Advanced, click Change Permissions, and then tick the box at the bottom.

I just booted up my old dusty copy of UT2004 and verified it's writing to its own folder.

I don't want games in my program files folders, so I always install games to a separate games folder and, as you say, no problems with that.

Also even if you do run a default install and it stores the settings in the appdata folder it also reads from there.''

and Javik

As for detecting non compatible programs.... seriously... did you even for a minute think about that. Yes, lets create a security feature and then leave a WIDE OPEN security breach that anyone can just waltz through... we're talking about MS here, not Apple.

[Wakers]

+1 for system restore.

Always leave that on, it makes solving anything from corrupted drivers to damage caused by malware 100x easier.

[guido.dati]

It looks like that is exactly the case. The older method of disabling UAC via the slider no longer works. You must edit the registry now. You may not have noticed, but at no point does the UserAccountControlSetting.exe actually ask you for a reboot in Windows 8 when you move the slider to the bottom.

So don't even bother with the slider. Just run PowerShell as Administrator and paste the following to disable UAC:

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -Value "0"

shutdown -r -t 0

Thankf for your advice, you solved my problem. I'd say you solved several problems in my machine. For example, I could launch Calibre, but I couldn't read the book with the internal viewer if I didn't runa as administrator the application. Sounds crazy.

[olivex]

Actually, as it turns out, what I posted will also break the Microsoft Store. I practically never disable UAC and was unaware of this limitation.

If you entered my registry change to disable UAC, re-enable it with the following command:

PowerShell as Administrator (This requires a restart)

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -Value "1" #Default value is 1

shutdown -r -t 0[/CODE]

To enable automatic silent UAC elevation for administrators without breaking the Microsoft Store you should do the following instead.

[i]PowerShell as Administrator (This takes effect immediately)[/i]

[CODE]
#The following is equal to the Security Policy "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" = "Elevate without prompting"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value "0" #Default value is 2

#The following is equal to the Security Policy "User Account Control: Allow UIAccess applications to prompt for elevation without using the secure dekstop" = "Enabled"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableUIADesktopToggle" -Value "1" #Default value is 0[/CODE]

The two methods do not work the same.

For example, as an admin, I run notepad and edit a file in Program Files folder. With first method, I can save the file. With second method, I can't. I can save the file if I run notepad as administrator.

So, I don't like that the first method breaks Metro store, but the second method doesn't work as expected.

I think this is because notepad is run as a standard user. There is another option 'Behavior of the elevation prompt for standard users', by default it is 'Prompt for credentials'. But I don't know if I set it not to prompt, it will be too risky.

[TheLegendOfMart]

Is there any way to change root drive protection back to that of Windows 7, I am using programs even when UAC is disabled and I run as administrator still don't have the ability to modify files on the root drive.

[zerowalker]

I don?t get it to work. If i disable UAC completely, everything i being run in Admin mode, as i want to. But it breaks the Store.

The other method:

#The following is equal to the Security Policy "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" = "Elevate without prompting"

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value "0" #Default value is 2

#The following is equal to the Security Policy "User Account Control: Allow UIAccess applications to prompt for elevation without using the secure dekstop" = "Enabled"

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableUIADesktopToggle" -Value "1" #Default value is 0

Doesn?t seem to make anything run in admin mode like normally.

[techbeck]

group policy or local group policy > Computer configuration > policys > windows >security > local

Silently elevates and dosnt brake the windows store, Good enough for a home network (Y)

Thank you for this. We always disable UAC since it interferes in what we are doing. Was setting up a few Surface Pros and was annoyed that I couldnt use the apps if UAC was off.