Vista Security

  • Thread starter Thread starter hedgehog
  • Start date Start date
H

hedgehog

I'm sorry if this has been asked before, but google didn't return any
valid links.

Ok, I'm new on vista business, and I've added my PC to the company's
domain, my domain account is a non-administrator. I then added the
domain account into the local Administrators group.

The problem is that vista dosn't consider me a local administrator. For
example, when I try to install a piece of stoftware, the UAC prompts me
for credentials and not for consent.

When it prompts me for credentials, I type in my domain username and
password and it lets me do it, meaning I have enough rights. If I have
enough rights to do it why dosn't it just ask me for consent ?

I've looked in Local Security Policy, and it is set to the default:
consent for administrators, and credentials for standard users.

I understand the idea behind UAC, and I would like use vista with it
enabled, but I'm a software developer, and I'm continually doing things
that makes vista prompt for credentials. I can't carry on typing on my
credentials every few minuites. Clicking on "Yes go ahead" on the
consent would be acceptable for me.

Any ideas ?


--
hedgehog
Posted via http://www.vistaheads.com
 
On Oct 17, 1:35 am, hedgehog <hedgehog.2yl...@no-
mx.forums.vistaheads.com> wrote:
> I'm sorry if this has been asked before, but google didn't return any
> valid links.
>
> Ok, I'm new on vista business, and I've added my PC to the company's
> domain, my domain account is a non-administrator. I then added the
> domain account into the local Administrators group.
>
> The problem is that vista dosn't consider me a local administrator. For
> example, when I try to install a piece of stoftware, the UAC prompts me
> for credentials and not for consent.
>
> When it prompts me for credentials, I type in my domain username and
> password and it lets me do it, meaning I have enough rights. If I have
> enough rights to do it why dosn't it just ask me for consent ?
>
> I've looked in Local Security Policy, and it is set to the default:
> consent for administrators, and credentials for standard users.
>
> I understand the idea behind UAC, and I would like use vista with it
> enabled, but I'm a software developer, and I'm continually doing things
> that makes vista prompt for credentials. I can't carry on typing on my
> credentials every few minuites. Clicking on "Yes go ahead" on the
> consent would be acceptable for me.
>
> Any ideas ?
>
> --
> hedgehog
> Posted viahttp://www.vistaheads.com

Besides turning UAC completely off (not recommended), I'd take a look
at your individual UAC settings. To do this, run secpol.msc as an
Administrator and navigate to Local Policies -> User Account
Management. You can then add your username to those tasks you perform
daily and don't wish to enter a password *I think*

-- Munchie
 
"hedgehog" <hedgehog.2yl30u@no-mx.forums.vistaheads.com> wrote in message
news:hedgehog.2yl30u@no-mx.forums.vistaheads.com...
>
> I'm sorry if this has been asked before, but google didn't return any
> valid links.
>
> Ok, I'm new on vista business, and I've added my PC to the company's
> domain, my domain account is a non-administrator. I then added the
> domain account into the local Administrators group.
>
> The problem is that vista dosn't consider me a local administrator. For
> example, when I try to install a piece of stoftware, the UAC prompts me
> for credentials and not for consent.
>
> When it prompts me for credentials, I type in my domain username and
> password and it lets me do it, meaning I have enough rights. If I have
> enough rights to do it why dosn't it just ask me for consent ?
>
> I've looked in Local Security Policy, and it is set to the default:
> consent for administrators, and credentials for standard users.
>
> I understand the idea behind UAC, and I would like use vista with it
> enabled, but I'm a software developer, and I'm continually doing things
> that makes vista prompt for credentials. I can't carry on typing on my
> credentials every few minuites. Clicking on "Yes go ahead" on the
> consent would be acceptable for me.


They may be pushing a different policy down via GPO which overrides the
local security policy. Ask your companies IT department if that is the
case.
 
munchie :

Like I said: in Local Security Policy (secpol.msc),
Local Policies > Security Options > User Account Control: Behavior of
the elevation prompt for administrators in Admin Approval Mode, is set
to Prompt for consent,
while Local Policies > Security Options > User Account Control:
Behavior of the elevation prompt for standard users, is set to Prompt
for credentials.
Now since I'm always being prompted for credentials it means that vista
considers me a standard user, eventhough my domain account is in the
local Administrators group, which should kick in the first rule and
prompt for consent rather. Shouldn't it ?

I've had a look in sepcol under Local Policies > User Rights
Assignment, but I can't find things like "Install software", am I
missing something ?

Seth:

I asked if they were pushing down a diff policy, and they replied "No".
Personally I doubt they even know how to do that :)

Cany anyone else make a suggestion ?


--
hedgehog
Posted via http://www.vistaheads.com
 
Administrator Logon

Hello, I'm a new Vista user,
I have the Vista Ultimate, I'm the one who installed it, but I can't logon
as an administrator, I don't know where is the applet to logon from,
previously in the windows XP, I was just hitting ALT+CTRL+Delete in the
logon window to get the administrator Account, but I tried it in vista,
nothing happened...
Can any one help me, how can I get the administrator account???
N.B, my current account is in the administrators group, but so many folders,
I can't access, such as the "Program Data\Application Data"...

John
 
Re: Administrator Logon

John Boshra wrote:
> Hello, I'm a new Vista user,
> I have the Vista Ultimate, I'm the one who installed it, but I can't
> logon as an administrator, I don't know where is the applet to logon
> from, previously in the windows XP, I was just hitting ALT+CTRL+Delete
> in the logon window to get the administrator Account, but I tried it in
> vista, nothing happened...
> Can any one help me, how can I get the administrator account???



Vista's built-in Administrator account is disabled by default, and
normally accessible only if no other administrative account is
available. You can enable the account via the Computer Management
Console (Right-click Computer > Manage > Local Users and Groups), if you
like.


> N.B, my current account is in the administrators group, but so many
> folders, I can't access, such as the "Program Data\Application Data"...
>


"Can't access..." in what specific manner? I've no problem reading the
contents of the Program Data folder (there is no "Application Data"
subfolder on my system) using a normal administrative account.



--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
 
Back
Top