none
Can't uncheck Run as Administrator

    Question

  • I have a program installed and under the Compatibility tab the "Run as Administrator" option is selected.  The machine runs Windows 7 but it is on a domain and the user account is not an administrator.  This gives us problems as they are unable to access the program without the Administrator password.  The issue is the box next to "Run as Administrator" is grayed out, therefore I cannot uncheck it.  I have tried using "Change Settings for All Users" but this didn't help.  I even went in and changed permissions on this full to give the User Account full access, but that didn't help either.  Any ideas?
    Monday, August 19, 2013 8:50 PM

Answers

  • Windows usually analyses a program's capability/requirement as well as the way the program works. Therefore, the program must be using any administrative operation. Sometimes, this can occur as an error if some set of codes similar to the administrative operation are detected.

    The only solution is disabling UAC, but it may compromise the security if any unknown programs/scripts are run.


    Balaji Kundalam

    Wednesday, August 21, 2013 2:55 PM

All replies

  • Hi ,

    Do you want to run this app as administrator? In addition,if the app can be run normally without admin privilege?

    If you want to run this app as administrator, I would like to suggest you try the following:
    1.Add the domain users to Local Administrator group.

    Add AD User/Group to Local Administrator Group

    http://gallery.technet.microsoft.com/scriptcenter/Add-AD-UserGroup-to-Local-fe5e9239/view/Discussions

    2.Create an elevated program any user is able to run after typing the admin password only once.

    Here's the steps:
    1. If you have not already, enable the built-in elevated "Administrator" account, and create a password for it.

    NOTE: You must use the actual built-in Adminstrator account, and not just another administrator type user account. If you don't the shortcut will now work.

    2. Log in to the built-in Administrator account, right click or press and hold on an empty space on the desktop, and click/tap on New and Shortcut.

    Note
    a.You would substitute ComputerName in the command below with the actual computer name.
    b.If the Administrator account has been renamed, then you would also need to substitute Administrator in the command below with the new name.
    c.You would substitute Full path to program's exe file in the command below with the actual full path of the elevated program's exe file within quotes that you want to have the
    standard user be able to run.

    3. Type the location below into the location area, and click/tap on the Next button.

    4. Right click or press and hold on the new shortcut, click/tap on Properties, Shortcut tab, and on the Change Icon button.

    5.Click/tap on OK.

    6.Click/tap on the Browse button, navigate to the location of the program's exe file, click on Open, select the program's icon, and click/tap on OK.

    7.Click/tap on OK.

    8.Copy the shortcut to the desktop of the user account that you would like to be able to run this elevated program without getting a UAC prompt or having to provide the
    administrator's password for it.

    9.Right click or press and hold on the shortcut on the user's desktop that you just copied to, and click/tap on Properties.

    10. Click/tap on the Security tab, and Advanced button.

    11.Select the user account, and click/tap on the Disable inheritance button.

    12.Click/tap on Convert inherited permissions into explicit permissions on this object.

    13.Select the user account, and click/tap on the Edit button.

    14.Make sure that only the Read & execute and Read "Allow" permissions are checked, and click/tap on OK.

    NOTE: This will prevent the user from being able to change the target of the elevated shortcut, and only be able to run the program the elevated shortcut was created to run.

    15.Click/tap on OK.

    16.Click/tap on OK.

    17.Log on to the user account that you made a copy of this shortcut to, and run the shortcut.

    18. In the command prompt that opened, type in your built-in Administrator account's password and press Enter. You will not see the password while you are typing it in.

    NOTE: You will only have to enter the Administrator's password for only the first time that this shortcut is ran in the user account. Afterwards, it will be remembered and entered automatically for the user when they run it without
    anyone being able to see the password.

    19.The user can now Pin to Taskbar or Pin to Start Menu this shortcut, assign a keyboard shortcut to it, or move it where they like for easy use in their user account.

    If not:
    You may uncheck the “Run as Administrator” option by using script.

    You may refer to the answers in following thread.
    http://superuser.com/questions/355430/why-is-run-this-program-as-an-administrator-disabled

    Please note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

    If any difficult encountered when customizing the script, you can ask for further assistance from scripting forum.
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home

    Regards,

    Summer Deng

    Wednesday, August 21, 2013 8:58 AM
  • Windows usually analyses a program's capability/requirement as well as the way the program works. Therefore, the program must be using any administrative operation. Sometimes, this can occur as an error if some set of codes similar to the administrative operation are detected.

    The only solution is disabling UAC, but it may compromise the security if any unknown programs/scripts are run.


    Balaji Kundalam

    Wednesday, August 21, 2013 2:55 PM