Essentially, I want to run known, trusted things like defrag and chkdsk
from
the command line without any UAC interferance or requests for passwords
pretty much like you can on XP (i.e., along the lines of I am the
administrator of my own machine, know what I'm doing and want to run these
things)..
Unfortunately, what you describe is not currently possible EXACTLY the way
you describe (having trusted programs that always run with admin
privileges).
The reason is because Windows does not know the difference between you
starting a program and another program starting a program. If you "bless" a
program by giving it permission to always run as admin, other programs can
also start that program, and use it to hijack your system. Imagine a program
taking control of a command prompt if you have set command prompt to always
run as administrator.
Now, you have mentioned that "run as administrator" on command prompt
doesn't work for you. When you do this, you should get a single "UAC" prompt
before command prompt opens. After that, you should not see another UAC
prompt regardless of what program you run from within the command prompt.
If this is not the way it works on your machine, then that's a bug... the
way I described is the way it should be working.
Just out of curiousity .. you are trying to run "cmd.exe" as admin, and not
"command.com", correct?
I can put these commands into a script or not, or possibly run them
out of Task Scheduler....nothing is working (I can run things in Task
Scheduler if I go through it's GUI, but have not had success trying to
access
it and make similar changes through the command line though the Vista
documenation suggests I should be able to do so).
I am not familiar with the task scheduler command line interface. However,
you would need to be running command prompt as admin in order to use it. If
your command prompt is having trouble being ran as admin, I could see why
you would be having difficulties.
So am trying to keep it as simple as possible and just run from a command
line, but am stuck in the sense that I either need to shut UAC off (not
what
I want) or I get prompted with it's GUI (also, not what I want).
Like I said earlier, the best way of doing this is living with the ONE UAC
dialog you get when running command prompt as admin. You are correct in that
those are your options, and the only secure "middle way" you have is the run
as administrator tool.
BTW, I also noticed you said you have to enter your password in order to run
a program with admin privileges... did you set this up yourself? If not, did
you change your user type to STANDARD user? Because this should only happen
if you are a STANDARD user by default.
When I try what is suggested below, I can create the shortcut just fine,
but
when I right click, select properties, and Compatibility, all the boxes
are
grayed out. My account is an "administrator" account with a strong
password
(8 characters, letters/numbes/upper lower case with things like #)....have
also tried this is the real "Administrator" account through safe mode, but
as
it says in Vista's help and on the web this doesn't work either.
You are going to the wrong place. You should be under the SHORTCUT tab.
- Right-click the shortcut
- Click Properties
- Click the SHORTCUT tab if it is not already selected
- Click "Advanced..." button
- Click Run As Administrator checkbox
- Click OK
- Click OK
I am getting all indications that other people are able to get things to
run
that are being roadblocked on my machine. I created an "image" right
after
I put Vista on the machine (an upgrade from XP)...so maybe I'll go back to
that? Is there a Local Security Policy setting that I can tweek? Thanks
for
giving this a think..
Let me know what exactly happens when you right-click command prompt, click
run as administator, and then run an admin tool. Also, please confirm that
your account is an administrator.
Depending on your configuration, I may have a possible solution for you.
- JB
Vista Support FAQ
http://www.jimmah.com/vista/