ANS: "What's the deal with UAC (Windows Needs Your Permission screens)" and "...But I thought I was

[Guest]

Sorry I still do not understand.

If the program is already running, when I right click it, there is no option
to run as administrator.
If the program is closed, again I cannot find this option.

If I bring up the file in "my computer, C drive, program files, microsoft
office, office 12", and then right click, "outlook exe", I can "run as", but
I cannot change to administrator.
If I "run as", and then untick "protect my computer...", I still cannot
access these web sites from internet explorer.

I know i must be doing something wrong, but I cannot understand how to do it
any other way.

 

[Jimmy Brush]

It sounds as if you may be using Windows XP. Sorry if I misunderstand, but
this newsgroup only pertains to Windows Vista, the next version of Windows.

I'm not sure what would be causing your problems in Internet Explorer under
Windows XP.

 

[Guest]

I am using Vista. Am I looking in the wrong files or something?

 

[Jimmy Brush]

When you right-click on an .exe file inside of Windows Explorer, as you
mentioned, there should be a menu item called "Run As Administrator", as
shown in the following picture:

http://beans.seartipy.com/wp-content/uploads/2006/06/vista/OpenAsAdmin.PNG.jpg

This also works if you do this on an item in the start menu:

http://www.rockyh.net/images/VSAsadmin.png

This will run any application with "administrator" privileges.

 

[Guest]

Is there any way to give a program permanent permission to run as
administrator? I have several programs that require this, even though I AM
running as an administrator and it is annoying to have to do this every time
I run the program. Thanks
Jo

 

[Jimmy Brush]

Hello,

This is a good question, but unfortunately this is not possible right now.

The reason is because allowing this would allow programs to attack those
programs which you have set to always run with administrator power.

Imagine the case where you have set the command prompt to always run with
admin power without notifying you. A rogue program could then start up a
command prompt behind the scenes and perform privileged actions, essentially
bypassing UAC.

If Microsoft were to have built this feature into Windows Vista, before long
all the malware would have learned how to take advantage of it, effectively
making UAC worthless.

In the future, programs that don't really need admin power won't ask for it,
so this problem will not become as prevalent as it is today. And, hopefully
Microsoft will figure out a way to allow this functionality without creating
a security vulnerability.

 

[Guest]

Jimmy,

Maybe you can help me...I'm trying to install HP Printer driver and
software. I'm logged in as Administrator and running RC2. The install fails
with an error of "Can't use 'run as administrator' to install this software".
It gives the same error if I actually use the "run as administrator" switch
to run it.

Any ideas?

Tim

 

[Richard Urban]

None of the HP printer drivers and software is Vista ready. When XP was
introduced it was a few months, and longer, before they released updated
drivers for their printers. Some printers they never updated.

Wait and see what happens.

--

Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

 

[Tom Lake]

Maybe you can help me...I'm trying to install HP Printer driver and

software. I'm logged in as Administrator and running RC2. The install
fails
with an error of "Can't use 'run as administrator' to install this
software".
It gives the same error if I actually use the "run as administrator"
switch
to run it.

Any ideas?

Try to set the compatibility of the setup program to XP.

Tom Lake

 

[Jeff]

Richard may be correct;
I have had an ongoing issue about this with HP-from 1st line techs
through their bosses;to their bosses;bosses.
And bottom line from HP;(they're consistent at least) and I paraphrase this;
" We will have Vista compatable drivers for our products;when Vista
releases. We do not support beta.).
So I gave my HP printer to a family member;and bought an Epson;that has
worked since Beta 2 5384.
Try as much as you like; and more power to you if you get a driver;but since
RTM isn't that far off; I'de hold tight; and wait for HP Vista compatable
drivers.

Jeff

 

[Guest]

Very few programs actually ask me to approve them everytime I run them, in
fact, hardly any. If your argument is correct, then all those programs could
be run be a "rogue" program. So what exactly is being protected? I thought
that was what anti-virus and programs like Defender were for? Do you
actually have to give permission every time you run every program? I have
UAC turned on, and it is only one or two that require it every time.

 

[deebs]

I think the reason is that programs running under an admin account have
access to a wider range of stuff.

If the program is from a reliable source then fine, there are no problems?

However, should the program be from an unreliable source then allowing it
full (or foolish) access to stuff under an admin account is not a very wise
thing to do.

Hence:

1 - install from admin

2 - run from limited user.

I'd guess that all if not most reputable software providers will conform to
good standards sooner if not later.

In the meantime I think it is better to conclude that UAC is your friend
with, for some users, a degree of experience and wisdom that far exceeds
that of the user wishing they could always run as admin rather than limited
user.

 

[Jimmy Brush]

Very few programs actually ask me to approve them everytime I run them, in
fact, hardly any. If your argument is correct, then all those programs
could
be run be a "rogue" program. So what exactly is being protected?

If a program does NOT ask you to approve it when it starts, that program
DOES NOT have administrator power, even if you are logged in as an
administrator. Only programs that ask you for permission when they start
have administrator power.

This means that unless you give an application permission when it starts, it
is impossible for it to do such things as delete/modify/create any file that
you do not have specific write access to (such as system files, program
files, etc), change/create/delete registry settings that affect the entire
computer, load drivers, change system settings, etc.

In essance, programs run as a "limited user" as defined by XP unless they
prompt you for permission, or you right-click them and click Run As
Administrator, in which case they run as an administrator.

I thought
that was what anti-virus and programs like Defender were for?

The anti-virus and defender programs detect known malware and remove them
for you.

UAC is designed to allow you to choose which programs have complete access
to your system. This allows you to prevent programs that you do not trust
from gaining access to your computer. Using UAC, you can help prevent
unidentified malware from getting onto your system by being vigilant;
however, that is not the explicit purpose of UAC - UAC is meant to give you
the supreme control over which programs have complete access to your
computer, for you to use as you see fit.

Do you
actually have to give permission every time you run every program? I have
UAC turned on, and it is only one or two that require it every time.

No, only those programs that ask for administrator power will need to be
approved every time they are ran.

 

[Guest]

I don't know if this will help you, but I actually got my Photosmart 1115 to
install in Vista by force installing the drivers for the 7800 series
photosmart that are included with Vista. I got this suggestion from another
user of this newsgroup and it worked! I can now print from the HP and so far
it has worked, though I haven't tried it from every possible program.

 

[swiftflo]

I can confirm that this works,I have a 7960 Photosmart and the driver for
this does not show up in Vista RC2, so I installed the driver for the 7800
and it works, although does not show my ink cartridge levels.

 

[Guest]

So why can't I check the 'run as administrator' box on the compatability tab
to automate running older software ? At least 50 % of my software fails to
run even using the various compatability options. Problem reports & solutions
sent a whopping 138 faults generated in just 6 days - with zero solutions.

 

[Jimmy Brush]

Are you trying to set this on a shortcut?

If so, you have to use the Shortcut tab, not the compatability tab. Click
the "Advanced..." button and then check Run As Administrator on that dialog
box.


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

 

[Guest]

I'm still struggling with the UAC blocking 'old software' ( actually bought
on Saturday but not yet Vista compliant). If anyone can tell me how to tick
the 'run as administrator' box on the compatabily tab I would be grateful. It
may prevent me from boring the kids about how to start their favourite
programmes up as an administrtaor. You try explaing that to a 3 year old !
PS Compatability wizard is also greyed out

 

[JerryM \(ID\)]

Try clicking the Start button and over on the right side bottom, move your
cursor over the right arrow box, then select Switch user.
In the next window see if you have an administrator to select.

 

[Guest]

Yes I am, and I have set the short cut to run as administrator. The program
runs fine if I right click the short cut and run as administrator - therefore
I assume if this is checked in the compatability tab it will run without any
problem. So how do you enable the 'run as administrator' in the compatability
tab, and yes I am logged on as the administrator ?