Sign in to follow this  
Followers 0

Windows 8- Run everything as Administrator

54 posts in this topic

I have been reading this thread, and many of you make good points.  I have never disabled system restore myself, however I could see how you might want to reclaim disk space it takes up especially if you do regular backups.  Most people don't backup their PCs. At least that's been my experience.


As for UAC, yeah, it looks like launching things as Administrator by default can NOT be done without breaking lots of Metro apps. You can auto-allow processes to elevate when requested, but several of you want to force everything to be elevated by default.

Proceed with caution!  There are plenty of good reasons why UAC exists.  But here are a couple of things you can do.


First of all, it's not the shortcut that you'd modify for "run as administrator".  It's the 'properties' on the executable.  This is an important distinction because it means if you set the "Run this program as an administrator" attribute on an executable, it doesn't matter how you run it (from command line, from shortcut, etc.) that program will run as administrator.

Secondly, you do not have to modify every program.  A process will automatically be elevated if the parent process is elevated.  So if you always launch your processes from one parent, make that parent run 'as an administrator' and you're set.


I can think of three likely UI entry points for launching new processes:
- The Metro screen "search" feature
- The old-school Run box which is still accessible via the [start]-R key combination
- You might launch processes using a classic start menu such as 'Classic Start Menu'


In all three cases, the parent is c:\windows\explorer.exe.


Unfortunately, you cannot make explorer "run as administrator" because there are no "properties" exposed for explorer.exe in the UI. However, there are ways to run explorer.exe elevated.  For example:
1. Launch an elevated command prompt  (cmd or powershell)
2. taskkill /im:explorer.exe /f
3. run explorer by typing "start explorer" - or if you're in powershell, you'll type "iex explorer"

This kills the existing explorer process and replaces it with an elevated one.


I found a simple tool called "U Are in Control" which makes this a little easier. It will work in Windows 8 RT or full, as it is just scheduled tasks and CMD scripts.  It lets you shift into 'everything is admin' mode when you want to run normally, and switch back into 'everything is normal' mode when you need to launch Metro apps.  When in 'normal' mode, only new processes are run with normal privilege.  Existing processes would still run as admin.



U Are In

1 person likes this

Share this post

Link to post
Share on other sites

On a domain PC, as an admin, but having many of the same problems. It looks like only the local admin / owner works for some installs. Once I took ownership of all the files and folders in the install, everything started working.

Share this post

Link to post
Share on other sites

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -Value "0"

shutdown -r -t 0


This worked perfectly for me - I was struggling getting things like webex and gotomeeting to run, so I was always futzing around with my settings and having to "run as administrator" wherever possible... Thanks a lot!

Share this post

Link to post
Share on other sites

Actually, as it turns out, what I posted will also break the Microsoft Store. I practically never disable UAC and was unaware of this limitation.

If you entered my registry change to disable UAC, re-enable it with the following command:

PowerShell as Administrator (This requires a restart)

Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -Value "1" #Default value is 1

shutdown -r -t 0

To enable automatic silent UAC elevation for administrators without breaking the Microsoft Store you should do the following instead.

PowerShell as Administrator (This takes effect immediately)

#The following is equal to the Security Policy "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" = "Elevate without prompting"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value "0" #Default value is 2

#The following is equal to the Security Policy "User Account Control: Allow UIAccess applications to prompt for elevation without using the secure dekstop" = "Enabled"
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableUIADesktopToggle" -Value "1" #Default value is 0


Sorry to necropost, but created an account just to say this helped resolve my irritation over UAC popups (by hiding, but leaving it enabled).



Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.