none
How do I allow access to a program to a standard user in Windows 7 where UAC pops up?

    Question

  • I have a program called Replay 4 from AppAssure.com.  this is a backup and recovery software.  I am running Windows 7.  On an XP machine a standard user can access the program but on a Windows 7 machine a standard user cannot access that program.  they are asked to enter an administrator credentials.  The UAC pops up.  How can I allow a standard user to access this application without having to enter admin rights.  I do not want to give admin rights to my users nor do i want to disable the UAC.  When I check on the .exe file of the app it does not have the checkmark on the "Run this program as an administrator" checked.  How do I resolve this.
    Monday, July 19, 2010 4:46 PM

All replies

  • I have a program called Replay 4 from AppAssure.com.  this is a backup and recovery software.  I am running Windows 7.  On an XP machine a standard user can access the program but on a Windows 7 machine a standard user cannot access that program.  they are asked to enter an administrator credentials.  The UAC pops up.  How can I allow a standard user to access this application without having to enter admin rights.  I do not want to give admin rights to my users nor do i want to disable the UAC.  When I check on the .exe file of the app it does not have the checkmark on the "Run this program as an administrator" checked.  How do I resolve this.


    Is this assuming you keep UAC active? You would follow this link and follow instructions to configure "AdminApprovalMode"

    http://technet.microsoft.com/en-us/library/dd835564(WS.10).aspx#BKMK_AdminApprovalMode

     


    Steve Kline - MCITP
    AAS - IT: Computer Network Systems
    MCTS: Server 2008 Network Infrastructure, Configuring
    MCTS: Server 2008 Active Directory, Configuring
    PRO: Server 2008 Server Administrator

    All answers are posted, "As Is" with no warranties or guarantees implied.
    http://www.itjournal-stevekline.com - Content coming soon.
    Monday, July 19, 2010 7:37 PM
  • Steve, I do not understand the link.  It does not mention anything about allowing access to only a specific program while UAC is enabled.  I do not want to disable UAC because I do not want users playing around with settings/making changes to the PC at all.  I want users to be able to use that program without entering admin credentials.


    joshua rg
    Tuesday, July 20, 2010 4:09 PM
  • Steve, I do not understand the link.  It does not mention anything about allowing access to only a specific program while UAC is enabled.  I do not want to disable UAC because I do not want users playing around with settings/making changes to the PC at all.  I want users to be able to use that program without entering admin credentials.


    joshua rg


    Joshua,

    Then you may wish to try and invoke the RunAs script on each system's EXE for Replay 4 with the Application compatibility toolkit.

    Here's an article on TechRepublic explaining just that. Unfortunately, I do not believe that you would be able to copy and paste the database that you generate from the ACT. There are other applications like Project UAC tool from Symantec that can help you accomplish these tasks, it's a UAC replacement it seems. 

    The problem with your resolution Joshua is that your software requires Administrator privileges. It says it all over the Replay troubleshooting and installation guides. If it's just a local backup agent automatically starting program that runs transparent, skip the user and run it as a service at startup. You could also schedule it with a local administrator account, and remove it from the startup for logged on user. You might be able to create a directory specific administrator and customize local security policies to restrict that administrator account for the sake of invoking an admins account.

    http://www.appassure.com/resources/technical-documentation/

    1 (703) 480-0100 and select Option #2 for the AppAssure Phone Support Center

    It really sounds like you need to chat with the Technical Support at AppAssure for further issues on this, you need to find out why the administrator account is required to operate the software fully. This is a Tech Forum for Windows Server security, but I don't see how donated responses could all have the same software you're using, nor the time to investigate all of AppAssure's white papers and tech documents to give you the answer you need.

    I do wish you the best of luck in finding a resolution. I also hope you wish to contribute the response from AppAssure in here, it would help many others out that may have your same question. =)

    Best Regards


    Steve Kline - MCITP
    This posting is "as is" without warranties and confers no rights.
    Tuesday, July 20, 2010 8:18 PM
  • Hi,

    You can mark the application to run under administrator privileges. Open the program's executable file properties, go to Compatibility, and select the “Run this program as Administrator” check box.

    Alternatively, check if the program can work with shims.

    Understanding Shims
    http://technet.microsoft.com/en-us/library/dd837644(WS.10).aspx

    Managing Shims in an Enterprise
    http://technet.microsoft.com/en-sg/library/dd837648(en-us,WS.10).aspx

    Regards,

    Salvador Manaois III
    C|EH MCSE MCSA MCTS MCITP(x4)
    ----------------------------------------------------------------------------
    Bytes & Badz: http://badzmanaois.blogspot.com
    My Passion: http://www.flickr.com/photos/badzmanaois
    My Scripting Blog: http://sgwindowsgroup.org/blogs/badz

    Wednesday, July 21, 2010 3:54 AM
  • If you want to launch a program that requires administrative privilege when log on with a standard user, you can try the following workaround.

    Bypass UAC using a Desktop Shortcut 

    Important Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Wednesday, July 21, 2010 8:18 AM
    Moderator
  • Arthur,

    I tried the "Bypass UAC using a Desktop Shortcut".  I created it logged in as administrator.  It worked, the launch of the application.  But when I transferred that shortcut to the users desktop, the shortcut did not work.  Instead for a quick second a cmd screen pops up just like as logged in as admin but the application does not open up.  Is there a proper way to do a shortcut transfer so it can work as for the standard user?  Or do I have to create another shortcut logged in as user and enter admin credentials for it?  I get a DOS screen that says "Access Denied". 

    Please advise.


    joshua rg
    Thursday, July 22, 2010 2:19 PM
  • Hi,

    When you create the task, in the General tab you will see a button “Change user or group” under “When running the task use the following user account”. You may try to change it to a user that in the administrator group.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Monday, July 26, 2010 6:18 AM
    Moderator
  • Arthur,

    I tried the "Bypass UAC using a Desktop Shortcut".  I created it logged in as administrator.  It worked, the launch of the application.  But when I transferred that shortcut to the users desktop, the shortcut did not work.  Instead for a quick second a cmd screen pops up just like as logged in as admin but the application does not open up.  Is there a proper way to do a shortcut transfer so it can work as for the standard user?  Or do I have to create another shortcut logged in as user and enter admin credentials for it?  I get a DOS screen that says "Access Denied". 

    Please advise.


    joshua rg


    Hello Joshua,

    I am going to assume you did not contact AppAssure to find out what permissions your users need.

    I recommend contacting them so you can use a security template to delegate user rights assignments to avoid all of the hastles.

    open mmc

    add snapins, "Security Configuration and Analysis" and "Security Templates"

    Create a template in the templates snapin and then open database in the SC&A snap-in, using our newly created template.

    Right-click SC&A and select Analyze Now... make changes... then go back and right-click but this time you will select Configure now after changes are made.

    If you make changes and want to make that as your new template... Select Export template instead of configure now. After the Export, then you can select to "configure now"

    This is where you can delegate permissions to a specific function instead of allowing them privileges to all functions. Thus the reason behind the need to contact AppAssure to discover what permissions they can get by with for functionality of the application.

     

    Regards,


    Steve Kline - MCITP
    This posting is "as is" without warranties and confers no rights.
    Monday, July 26, 2010 9:42 AM
  • Arthur,

    Logged in with admin credentials I can use the shortcut.  When I check the task scheduler I see it listed in the task scheduler library.

    Logged in as a standard user without admin credentials I cannot use the shortcut.  I get an "Access is Denied" prompt in a DOS windows that appears for a brief second then disappears.  When I check the task scheduler I do not see the task I created in the task scheduler library.

    Is there a way to import this task logged in a a standard user in task scheduler?

    I cannot create this task while in stand user mode because it does not allow me to.  It asks for admin credentials.  When I enter the admin credentials it does not accept them.

    I now tried clicking on the shortcut from the admin login for the task and it does not work anymore.  regarding your note " “When running the task use the following user account”. You may try to change it to a user that in the administrator group."  I have it as administrator.  It does not work.

    Please advise.


    joshua rg
    Monday, July 26, 2010 1:37 PM
  • Hi there Joshuarg,

    no sure if you solved this but I was struggling with the same issue with another program and i solved it using this solution as followed but with on change and thats when you creating the scheduled task in the general tab, under security option you select change user or groups and select the user or groups you want to use the program otherwise it just selects the admin profile you make it with. You must make a new schedule for every program you want to bypass and for every user or group, i Haven't tested groups yet so be careful that you not opening instances of the program in the wrong user account as was happening to me in the beginning.

    Hope this helped.

    Regards,

    Nigel

    ITech Gippsland

     

     

    Wednesday, August 04, 2010 7:42 AM