Disable UAC for specific programs/apps; possible?


Recommended Posts

kiddingguy

Everything I launch programs like Speccy and others I get the - annoying - UAC popup to "allow changes".

 

Is there a way as to say to UAC... "Hey, this is app is OK, stop pointing this message out everytime"? (or is it just bad programming by the developers?) 

And not by adjusting the general and overall Windows settings of UAC. I would like to keep it that way.

Link to post
Share on other sites
goretsky

Hello,

 

My guess is that the program is doing something which requires administrative permission.  In this case, perhaps involving a driver or a service.

 

In the distant past, I have used JoeWare's CreateProcessAsUser (CPAU) program to do this, but I do not know if that works under Windows 10.

WindowsTenForums has a tutorial on how to use Scheduled Tasks to bypass the UAC prompt here.  It is a bit of a lengthy/somewhat convoluted process.

If you are going to do something like this, be sure to re-test it each time you update the application you are launching without UAC, as its behavior could change, and this could become problematic.  Also, keep in mind that once you have allowed a program to run as an administrator, it can make global changes to the system, so be very cautious about what sorts of programs you give these permissions to, and keep an eye on things when you run them for unexpected behaviors/consequences.

 

Regards,

 

Aryeh Goretsky

  • Like 3
Link to post
Share on other sites
kiddingguy
15 hours ago, goretsky said:

Hello,

 

My guess is that the program is doing something which requires administrative permission.  In this case, perhaps involving a driver or a service.

 

In the distant past, I have used JoeWare's CreateProcessAsUser (CPAU) program to do this, but I do not know if that works under Windows 10.

WindowsTenForums has a tutorial on how to use Scheduled Tasks to bypass the UAC prompt here.  It is a bit of a lengthy/somewhat convoluted process.

If you are going to do something like this, be sure to re-test it each time you update the application you are launching without UAC, as its behavior could change, and this could become problematic.  Also, keep in mind that once you have allowed a program to run as an administrator, it can make global changes to the system, so be very cautious about what sorts of programs you give these permissions to, and keep an eye on things when you run them for unexpected behaviors/consequences.

 

Regards,

 

Aryeh Goretsky

Thx, But I think I will keep it this way...

Link to post
Share on other sites
goretsky

Hello,

 

I think that is best, actually.


Personally, I would stick with the UAC prompt.  It serves as a type of reminder that you are performing an action that can affect the entirety of the system, best to exercise some caution on the next few things I do with it.

 

Regards,

 

Aryeh Goretsky

 

Link to post
Share on other sites
freqnasty

The UAC method Windows has in place somewhat replicates the method Linux uses to increase security when running apps. 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

  • Similar Content

    • By techbeck
      So trying to get Windows 8.1 and Windows 10 apps to work with UAC enabled via group policy.  Did some digging around and the following policy settings sets my test client UAC settings to the 3rd level.  So I know the policy is being applied but the damn camera app, and other apps, are not working.  When trying to open I get the annoying prompt that UAC must be enabled in order for the app to load.  I double checked UAC on the client and it is indeed set to level 3 but for some damn reason, the PC still sees it as disabled.
       
      Any ideas on this?  It is really fricking annoying. UAC is disabled for all Windows 7 machines (just what my work has done, don't really want to discuss this part) so I created a different OU in AD for testing enabling UAC.  This is the only GPO that is in use for the test group.
       
      Admin Approval Mode for the Built-in Administrator account = Disabled Allow UIAccess applications to prompt for elevation without using the secure desktop = Disabled Behavior of the elevation prompt for administrators in Admin Approval Mode = Prompt for consent for non-Windows binaries Behavior of the elevation prompt for standard users = Prompt for credentials Detect application installations and prompt for elevation = Enabled Only elevate executables that are signed and validated = Disabled Only elevate UIAccess applications that are installed in secure locations = Enabled Run all administrators in Admin Approval Mode = Enabled Switch to the secure desktop when prompting for elevation = Enabled Virtualize file and registry write failures to per-user locations = Enabled  
      Thanks
    • By sathenzar
      I know that it's technically a bad practice to embed in the manifest file to require administrator rights but I'm not sure what else to do. I know you can make it to where a process within the program requires admin rights but that is not an option since the process would run every 15 min and the user would have to click accept each time (that would drive me nuts). I have to write to a various number of folders that the user has specified in various parts of their computer (program files, my documents, etc). Program files will not let me write to any of the folders without admin rights (which makes sense I guess). So currently I'm embedding in the program the manifest file to require admin rights. Am I stuck with this option? I have a backup program which backs up my client data, I have no way of knowing ahead of time which folders they will write to.