Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Remove Run As Adminstrator from Right click menu

Answered Remove Run As Adminstrator from Right click menu

  • Monday, February 04, 2013 2:58 PM
     
     
    Sign In to Vote
    0

    Is there a specific GPO to remove the right click run as administrator option? or do i have to disable right click all together, i know there is a reg key which could be applied as a GPO but is this a native setting and if so where do i find it?

    Thanks

     

All Replies

  • Monday, February 04, 2013 6:29 PM
     
     Answered
    Sign In to Vote
    0
     
    > Is there a specific GPO to remove the right click run as administrator
    > option?
    >
     
     
    The first match has a reg file - open it in notepad and deploy the
    corresponding changes through Group Policy Preferences "Registry".
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked As Answer by Zanderol24 Tuesday, February 05, 2013 9:11 PM
    •  
     
  • Tuesday, February 05, 2013 3:16 AM
    Moderator
     
     
    Sign In to Vote
    0

    Hi,

    No, no such a group policy setting. If you have Windows Vista or Windows 7 clients, you can disable UAC.

    See: How to Disable or enable "Run as Administrator"
    http://www.fanhow.com/knowhow:Disable_or_enable_%22Run_as_Administrator%22_28853888

    Regards,
    Cicely

     
  • Tuesday, February 05, 2013 9:05 AM
     
     
    Sign In to Vote
    0

    So i could just turn off the secondary logon service via GP?

    for a student group  OU for example

     
  • Tuesday, February 05, 2013 10:40 AM
     
     
    Sign In to Vote
    0

    Yes you can apply the reistry settings using Group Policy based on OU.

    Kind regards,

    Tim
    MCITP, MCTS
    http://directoryadmin.blogspot.com

    This posting is provided 'AS IS' with no warranties or guarantees and confers no rights.

    "If this thread answered your question, please click on "Mark as Answer"

     
  • Tuesday, February 05, 2013 11:20 AM
     
     
    Sign In to Vote
    0
    Am 05.02.2013 10:05, schrieb Zanderol24:
    > for a student group  OU for example
     
    Not for users - this will apply to computers and thus to all users
    logging on...
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Tuesday, February 05, 2013 12:58 PM
     
     
    Sign In to Vote
    0

    so just create a new registry 

    for each of these with a hive of HKEY_CLASSES_ROOT and then just copy this in the key path cmdfile\shell\runas, exefile\shell\runas etc 

    and thats it?

    also is the default value name ok or can that be left blank




    • Edited by Zanderol24 Tuesday, February 05, 2013 1:01 PM
    • Edited by Zanderol24 Tuesday, February 05, 2013 4:09 PM edit
    •  
     
  • Tuesday, February 05, 2013 4:22 PM
     
     Answered
    Sign In to Vote
    0

    created a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas

    left the default value name alone. tested and it works - thanks for the guidance guys 

    • Marked As Answer by Zanderol24 Tuesday, February 05, 2013 4:22 PM
    •  
     
  • Tuesday, February 05, 2013 8:55 PM
     
     
    Sign In to Vote
    0
    Am 05.02.2013 13:58, schrieb Zanderol24:
    > and thats it?
     
    Life is easy ;-))
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Tuesday, February 05, 2013 9:46 PM
     
     
    Sign In to Vote
    0
    If only it was easy. Cheers Martin
     
  • Wednesday, February 06, 2013 10:22 AM
     
     
    Sign In to Vote
    0

    to get the runas back i copied the other GPO and changed to "create", this brought back the right click context but its broken the .lnk file association now. did i break something along the way?

    so i copied (create a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas) but changed this to create i disabled the original delete policy and enabled this and lnk file association is screwed for want of a better word. tried to runassoc.exe lnkfile but this didnt work


    • Edited by Zanderol24 Wednesday, February 06, 2013 2:49 PM
    • Edited by Zanderol24 Wednesday, February 06, 2013 2:51 PM
    •  
     
  • Wednesday, February 06, 2013 1:30 PM
     
     
    Sign In to Vote
    0
    Am 06.02.2013 11:22, schrieb Zanderol24:
    > to get the runas back i copied the other GPO and changed to "create",
    > this brought back the right click context but its broken the .lnk file
    > association now. did i break something along the way?
     
    I don't know what you deleted and recreated at all :-) Easiest should be
    "compare with a working system". Also be aware of
    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk -
    compare that, too.
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Wednesday, February 06, 2013 4:39 PM
     
     
    Sign In to Vote
    0
    so i copied (create a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas) but changed this to create i disabled the original delete policy and enabled this and lnk file association is screwed for want of a better word. tried to runassoc.exe lnkfile but this didnt work
    • Edited by Zanderol24 Wednesday, February 06, 2013 4:43 PM
    •  
     
  • Wednesday, February 06, 2013 5:17 PM
     
      Has Code
    Sign In to Vote
    0

    found it 

    [HKEY_CLASSES_ROOT\exefile\shell\runas\command]

    @="\"%1\" %*"
"IsolatedCommand"="\"%1\" %*"
    phew -

     
  • Wednesday, February 06, 2013 8:39 PM
     
     
    Sign In to Vote
    0
     
    > found it
    >
    > [HKEY_CLASSES_ROOT\exefile\shell\runas\command]
    >
    > @="\"%1\" %*" "IsolatedCommand"="\"%1\" %*"
    >
    > phew -
    >
     
    Was just starting to ask this question - runas has subkeys and values,
    did you recreate them, too?
     
    congrats :-)
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Thursday, February 07, 2013 8:29 AM
     
     
    Sign In to Vote
    0

    so Martin i ask you this- what key registry key do i delete to remove the runas without messing up the file association or if thats not possible what reg file do i create to bring it back including sub keys\ values etc!!! cheers :)

     
  • Thursday, February 07, 2013 3:01 PM
     
     
    Sign In to Vote
    0
    Am 07.02.2013 09:29, schrieb Zanderol24:
    >
    > so Martin i ask you this- what key registry key do i delete to remove
    > the runas without messing up the file association or if thats not
    > possible what reg file do i create to bring it back including sub
    > keys\ values etc!!! cheers :)
    >
     
    To fully answer this question, I'd had to do  lots of try'n error... We
    never felt the need to remove "run as adminstrator", so I beg your
    pardon for not doing this invest of time - I'm working hard :()
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
     
  • Friday, February 08, 2013 8:15 AM
     
     
    Sign In to Vote
    0
    Thanks anyway Martin-  Thread closed