Turn on UAC only for Standard Users?

  • Thread starter Thread starter Mickey Segal
  • Start date Start date
M

Mickey Segal

Is it possible to turn User Account Control off only for Administrator
accounts and leave it on for Standard Users? I see how to turn UAC on or
off for the whole computer. I'd like to turn it on only for Standard users,
but I don't see how to do that. Is it possible?

Has anyone noticed changes in program settings when turning off UAC? I made
lots of settings in a program that stores settings in the registry, then
turned off UAC, and now all the settings are gone. I don't know if this was
a coincidence or whether turning off UAC wipes out parts of the registry.
 
Mickey said:
Is it possible to turn User Account Control off only for Administrator
accounts and leave it on for Standard Users? I see how to turn UAC on or
off for the whole computer. I'd like to turn it on only for Standard users,
but I don't see how to do that. Is it possible?

Has anyone noticed changes in program settings when turning off UAC? I made
lots of settings in a program that stores settings in the registry, then
turned off UAC, and now all the settings are gone. I don't know if this was
a coincidence or whether turning off UAC wipes out parts of the registry.

UAC is not user-specific. It is global, so it is either on or off for
everyone. I don't know the answer to your second question.


Malke
 
Mickey Segal said:
Is it possible to turn User Account Control off only for Administrator
accounts and leave it on for Standard Users? I see how to turn UAC on or
off for the whole computer. I'd like to turn it on only for Standard
users, but I don't see how to do that. Is it possible?

UAC is not user specific but a global setting
Has anyone noticed changes in program settings when turning off UAC? I
made lots of settings in a program that stores settings in the registry,
then turned off UAC, and now all the settings are gone. I don't know if
this was a coincidence or whether turning off UAC wipes out parts of the
registry.

I'll make a guess. I don't run Vista with UAC off so I haven't tested this.
With UAC on when the misbehaved program wrote to system files areas or
system registry settings the operations were redirected to the virtual store
for that user. With UAC off you lose the benefit of this extra security and
the misbehaved program can do whatever it wants possibly trashing your
system in the process.
 
You can also turn off UAC and do all your main configuration stuff, so
you're not constantly being prompted for elevation. Then turn UAC back on.

You'll still be prompted on program installs and sheilded options. But once
you're done with the initial configuration you probably won't be doing those
things all the time. I think I see fewer than one UAC prompt a day now.
 
UAC is not user specific but a global setting


I'll make a guess. I don't run Vista with UAC off so I haven't tested this.
With UAC on when the misbehaved program wrote to system files areas or
system registry settings the operations were redirected to the virtual store
for that user. With UAC off you lose the benefit of this extra security and
the misbehaved program can do whatever it wants possibly trashing your
system in the process.

It seems some here still cling to a simplistic view of UAC's feaures
and purpose. Moving files or folders from one non system location to
another can't possibly be considered a "threat" to the system and
isn't "misbehaving" yet UAC at times will nag you to death if you try
or even simply try to delete such files, IF some application is seen
by Vista as "owning" the files then way too often UAC steadfastly
refuses to allow you to change the permisssions no matter what you do
short of turning UAC off. I don't view such heavy-handed inteference
as a "feature" and you wouldn't either if you had to deal with this
type of issue constantly.

As far as "security" that is a red herring. Source: Microsoft. People
need to educate themselves on what IT professionals, seasoned users
and Microsoft itself admits to regarding the failings of UAC. Such
things aren't often posted to newsgroups like this. Explore for web
and LEARN.

The intended real purpose of UAC is to educate users of the risks
running at administrator level. UAC does not prevent that, rather it
simply (if working correctly, which it often don't) pops up a warning
then if you are a administrator allows you to proceed or under some
situations allows you to elevate a process to have administrative
rights to do what you were planning on doing anyway. People that view
such mickey mouse features as real security don't have even a basic
understanding of security issues are all about.

The myth some here seem to be foolishly perpetuating is if UAC is in
it's default "on" condition somehow your system is safe. Since UAC
pops up usually when you are in the middle of trying to do some task,
human nature being what it is people will continue to do what they
intended to do and often nothing stops them except for UAC asking you
to confirm want you want to do. This quickly leads to people just
clicking through every time a warning pops up and is the electronic
version of crying wolf. In short order, nobody pays any real attention
to the UAC nag warnings, thus defeating the purpose.

That leaves us with all the false "security" warnings UAC has a bad
habit of nagging about, which quickly becomes an annoyance. Again how
often you see these things depends on what your use your computer for.
 
Unfortunately, UAC is a global setting it can't be turned off for one user
and on for another.

--
John Barnett MVP
Associate Expert
Windows - Shell/User

Web: http://xphelpandsupport.mvps.org
Web: http://vistasupport.mvps.org

The information in this mail/post is supplied "as is". No warranty of any
kind, either expressed or implied, is made in relation to the accuracy,
reliability or content of this mail/post. The Author shall not be liable for
any direct, indirect, incidental or consequential damages arising out of the
use of, or inability to use, information or opinions expressed in this
mail/post..
 
Mickey Segal said:
Is it possible to turn User Account Control off only for Administrator
accounts and leave it on for Standard Users? I see how to turn UAC on or
off for the whole computer. I'd like to turn it on only for Standard
users, but I don't see how to do that. Is it possible?

Has anyone noticed changes in program settings when turning off UAC? I
made lots of settings in a program that stores settings in the registry,
then turned off UAC, and now all the settings are gone. I don't know if
this was a coincidence or whether turning off UAC wipes out parts of the
registry.


You can set these registry keys to the following values at

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

"ConsentPromptBehaviorAdmin"= 0 (dword)
"ConsentPromptBehaviorUser"=1 (dword)

Doesn't turn UAC off, so you'll reap the benefits off protected mode /
virtualisation etc, but you'll see fewer prompts as an admin. Standard user
remains the same.

You can also achieve the same via

Start >secpol.msc ( depending on your Vista version)
 
The details for tuening off UAC only for the administrator are now available
on my website:
http://vistasupport.mvps.org/disable_user_account_control_for_the_administrator_account_only.htm

--
John Barnett MVP
Associate Expert
Windows - Shell/User

Web: http://xphelpandsupport.mvps.org
Web: http://vistasupport.mvps.org

The information in this mail/post is supplied "as is". No warranty of any
kind, either expressed or implied, is made in relation to the accuracy,
reliability or content of this mail/post. The Author shall not be liable for
any direct, indirect, incidental or consequential damages arising out of the
use of, or inability to use, information or opinions expressed in this
mail/post..
 
It seems this will not work on the computer for which I need it since it has
Vista Home Basic, which appears not to have secpol.msc. My Vista Business
computer does have secpol.msc.
 
I saw this by accident while looking for something else. This helps me
alot.
Burton Roberts
 
Mickey your original post didn't state that Vista Basic was being used. In
this case, no it won't work. Like Windows XP Home Vista Basic doesn't have
the group policy add in so you can't alter the security policy. My apologies
i thought you were using ultimate or Business. I assume Premium has the
secpol msc but, having not tried it, i can't be sure.

--
John Barnett MVP
Associate Expert
Windows - Shell/User

Web: http://xphelpandsupport.mvps.org
Web: http://vistasupport.mvps.org

The information in this mail/post is supplied "as is". No warranty of any
kind, either expressed or implied, is made in relation to the accuracy,
reliability or content of this mail/post. The Author shall not be liable for
any direct, indirect, incidental or consequential damages arising out of the
use of, or inability to use, information or opinions expressed in this
mail/post..
 
I'm glad you found the instructions useful, Burton

--
John Barnett MVP
Associate Expert
Windows - Shell/User

Web: http://xphelpandsupport.mvps.org
Web: http://vistasupport.mvps.org

The information in this mail/post is supplied "as is". No warranty of any
kind, either expressed or implied, is made in relation to the accuracy,
reliability or content of this mail/post. The Author shall not be liable for
any direct, indirect, incidental or consequential damages arising out of the
use of, or inability to use, information or opinions expressed in this
mail/post..
 
Home premium does NOT have secpol.msc

Lou

John Barnett MVP said:
Mickey your original post didn't state that Vista Basic was being used. In
this case, no it won't work. Like Windows XP Home Vista Basic doesn't have
the group policy add in so you can't alter the security policy. My
apologies i thought you were using ultimate or Business. I assume Premium
has the secpol msc but, having not tried it, i can't be sure.

--
John Barnett MVP
Associate Expert
Windows - Shell/User

Web: http://xphelpandsupport.mvps.org
Web: http://vistasupport.mvps.org

The information in this mail/post is supplied "as is". No warranty of any
kind, either expressed or implied, is made in relation to the accuracy,
reliability or content of this mail/post. The Author shall not be liable
for any direct, indirect, incidental or consequential damages arising out
of the use of, or inability to use, information or opinions expressed in
this mail/post..
 
This solution only works for people who have Business or
Ultimate editions of Vista. Microsoft in their unfinite wisdom
do not provide secpol.msc in Home editions.

TweakVista has some advice on how to do this if you don't
have Vista Home Basic/Home Premium. I created my own
simple program to set this, and there is a publically available
program named TweakUAC.
 
Back
Top