none
Remove Run As Adminstrator from Right click menu

    Question

  • Is there a specific GPO to remove the right click run as administrator option? or do i have to disable right click all together, i know there is a reg key which could be applied as a GPO but is this a native setting and if so where do i find it?

    Thanks

    Monday, February 04, 2013 2:58 PM

Answers

  •  
    > Is there a specific GPO to remove the right click run as administrator
    > option?
    >
     
     
    The first match has a reg file - open it in notepad and deploy the
    corresponding changes through Group Policy Preferences "Registry".
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by Zanderol24 Tuesday, February 05, 2013 9:11 PM
    Monday, February 04, 2013 6:29 PM
  • created a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas

    left the default value name alone. tested and it works - thanks for the guidance guys 

    • Marked as answer by Zanderol24 Tuesday, February 05, 2013 4:22 PM
    Tuesday, February 05, 2013 4:22 PM

All replies

  •  
    > Is there a specific GPO to remove the right click run as administrator
    > option?
    >
     
     
    The first match has a reg file - open it in notepad and deploy the
    corresponding changes through Group Policy Preferences "Registry".
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    • Marked as answer by Zanderol24 Tuesday, February 05, 2013 9:11 PM
    Monday, February 04, 2013 6:29 PM
  • Hi,

    No, no such a group policy setting. If you have Windows Vista or Windows 7 clients, you can disable UAC.

    See: How to Disable or enable "Run as Administrator"
    http://www.fanhow.com/knowhow:Disable_or_enable_%22Run_as_Administrator%22_28853888

    Regards,
    Cicely

    Tuesday, February 05, 2013 3:16 AM
  • So i could just turn off the secondary logon service via GP?

    for a student group  OU for example

    Tuesday, February 05, 2013 9:05 AM
  • Yes you can apply the reistry settings using Group Policy based on OU.


    Kind regards,

    Tim
    MCITP, MCTS
    http://directoryadmin.blogspot.com

    This posting is provided 'AS IS' with no warranties or guarantees and confers no rights.

    "If this thread answered your question, please click on "Mark as Answer"

    Tuesday, February 05, 2013 10:40 AM
  • Am 05.02.2013 10:05, schrieb Zanderol24:
    > for a student group  OU for example
     
    Not for users - this will apply to computers and thus to all users
    logging on...
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Tuesday, February 05, 2013 11:20 AM
  • so just create a new registry 

    for each of these with a hive of HKEY_CLASSES_ROOT and then just copy this in the key path cmdfile\shell\runas, exefile\shell\runas etc 

    and thats it?

    also is the default value name ok or can that be left blank




    • Edited by Zanderol24 Tuesday, February 05, 2013 4:09 PM edit
    Tuesday, February 05, 2013 12:58 PM
  • created a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas

    left the default value name alone. tested and it works - thanks for the guidance guys 

    • Marked as answer by Zanderol24 Tuesday, February 05, 2013 4:22 PM
    Tuesday, February 05, 2013 4:22 PM
  • Am 05.02.2013 13:58, schrieb Zanderol24:
    > and thats it?
     
    Life is easy ;-))
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Tuesday, February 05, 2013 8:55 PM
  • If only it was easy. Cheers Martin
    Tuesday, February 05, 2013 9:46 PM
  • to get the runas back i copied the other GPO and changed to "create", this brought back the right click context but its broken the .lnk file association now. did i break something along the way?

    so i copied (create a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas) but changed this to create i disabled the original delete policy and enabled this and lnk file association is screwed for want of a better word. tried to runassoc.exe lnkfile but this didnt work


    • Edited by Zanderol24 Wednesday, February 06, 2013 2:51 PM
    Wednesday, February 06, 2013 10:22 AM
  • Am 06.02.2013 11:22, schrieb Zanderol24:
    > to get the runas back i copied the other GPO and changed to "create",
    > this brought back the right click context but its broken the .lnk file
    > association now. did i break something along the way?
     
    I don't know what you deleted and recreated at all :-) Easiest should be
    "compare with a working system". Also be aware of
    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk -
    compare that, too.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Wednesday, February 06, 2013 1:30 PM
  • so i copied (create a delete reg GP added the HKEY_CLASSES_ROOT to the drop down and browsed to exefile\shell\runas) but changed this to create i disabled the original delete policy and enabled this and lnk file association is screwed for want of a better word. tried to runassoc.exe lnkfile but this didnt work
    • Edited by Zanderol24 Wednesday, February 06, 2013 4:43 PM
    Wednesday, February 06, 2013 4:39 PM
  • found it 

    [HKEY_CLASSES_ROOT\exefile\shell\runas\command]

    @="\"%1\" %*" "IsolatedCommand"="\"%1\" %*"

    phew -

    Wednesday, February 06, 2013 5:17 PM
  •  
    > found it
    >
    > [HKEY_CLASSES_ROOT\exefile\shell\runas\command]
    >
    > @="\"%1\" %*" "IsolatedCommand"="\"%1\" %*"
    >
    > phew -
    >
     
    Was just starting to ask this question - runas has subkeys and values,
    did you recreate them, too?
     
    congrats :-)
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Wednesday, February 06, 2013 8:39 PM
  • so Martin i ask you this- what key registry key do i delete to remove the runas without messing up the file association or if thats not possible what reg file do i create to bring it back including sub keys\ values etc!!! cheers :)

    Thursday, February 07, 2013 8:29 AM
  • Am 07.02.2013 09:29, schrieb Zanderol24:
    >
    > so Martin i ask you this- what key registry key do i delete to remove
    > the runas without messing up the file association or if thats not
    > possible what reg file do i create to bring it back including sub
    > keys\ values etc!!! cheers :)
    >
     
    To fully answer this question, I'd had to do  lots of try'n error... We
    never felt the need to remove "run as adminstrator", so I beg your
    pardon for not doing this invest of time - I'm working hard :()
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Thursday, February 07, 2013 3:01 PM
  • Thanks anyway Martin-  Thread closed
    Friday, February 08, 2013 8:15 AM