locked
Bypassing User Account Control for an Application RRS feed

  • Question

  • Is there a way in Vista to bypass the User Account Control prompt for trusted applications?

     

    An Example, I use Visual Studio 2005 and have set it to run as an administrator. Everytime It runs UAC prompts me to elevate the priveledges. Naturally I could turn off UAC in the security policy but then I would loose all its benefits.

     

    I would prefer it to prompt me the first time and give me the option to automatically elevate or deny its priveledges in future. This could be done in the secure UI prompt as a checkbox saying something like 'Always do this in the future'.

     

    I surpose this would also lead to the need for a administrator level management window to change this option per application should you set it incorrectly, wish to make changes etc.

    Monday, November 12, 2007 1:47 AM

Answers

  •  

    Hi Jie-Feng,

     

    Just disabling UAC is not the answer. Afterall why does it exist? If it has a purpose and I believe it does then it should be enabled.

     

    Since it is useful but causes undue frustration when it keeps prompting the user EVERY time they wish to run a program there should be a way to turn off the prompts for selected trusted programs.

     

    IE allows me to specify trusted sites, and allows me to 'dont ask me about this again', the file copy wizard allows me to 'Do this for all current items'. This makes sense!

     

    Look at the alternative! Turn the surposed feature off because it is anoying? Why have the feature if it doesnt work for the users?

    Monday, December 3, 2007 2:52 AM

All replies

  • Hi,

     

    I am sorry to say that we cannot set UAC to exclude a specific *.exe file. This is designed for security considerations because the DLL files loaded by the *.exe in the future may cause potential problems.

     

    At this time, we may use the following workaround:

     

    1.    Click Start->All Programs->Accessories.

    2.    Right click Command Prompt and choose "Run As Administrator".

    3.    Run the application in that window. (Note: Please only run the applications that you trust.)

     

    I hope this helps.

     

    Friday, November 30, 2007 9:30 AM
  • the workaround is flawed.  In the (common) case where a user of the computer is absolutely NOT autorised to have administrative rights, to prevent unathorized changes to the system by the user, if that user has an application, which is trusted by the organization, but not by the operating system, then every time the user wishes to run the client application they need an administrator to stop by their desk to provide the password.

    so, I ask again, how do I provide my administrators with the ability to grant elevation rights to a specific user, for a specific program, such that the user does not need an administrator password EVERY time the program runs.

    Michael.

    Monday, December 3, 2007 12:03 AM
  • Monday, December 3, 2007 2:30 AM
    Moderator
  • Hi Michael,

     

    For this scenario, I think you need to disable the UAC as a work around. For more information, please look into the following:

     

    http://technet.microsoft.com/en-us/windowsvista/aa906023.aspx

     

    http://technet.microsoft.com/en-us/windowsvista/aa905108.aspx

     

    Hope it helps.

    Monday, December 3, 2007 2:33 AM
  • Hmm, this may not currently be possible but it could and should be implemented. A registry key secured to the system account could be used to mark if the application was allowed to bypass prompting.

     

    Run as Administrator doesnt disable the UAC prompt. It simply elevates the task to Adminstrator priveledges, which automatically initiates the prompt.

     


     

    Monday, December 3, 2007 2:51 AM
  •  

    Hi Jie-Feng,

     

    Just disabling UAC is not the answer. Afterall why does it exist? If it has a purpose and I believe it does then it should be enabled.

     

    Since it is useful but causes undue frustration when it keeps prompting the user EVERY time they wish to run a program there should be a way to turn off the prompts for selected trusted programs.

     

    IE allows me to specify trusted sites, and allows me to 'dont ask me about this again', the file copy wizard allows me to 'Do this for all current items'. This makes sense!

     

    Look at the alternative! Turn the surposed feature off because it is anoying? Why have the feature if it doesnt work for the users?

    Monday, December 3, 2007 2:52 AM
  • Hi,

     

    Thanks for your update. Personally, I think the UAC feature will be improved in the future.

     

     

     

    Monday, December 3, 2007 6:26 AM
  • Hi Michael,

     

    For this scenario, I think you need to disable the UAC as a work around. For more information, please look into the following:

     

    http://technet.microsoft.com/en-us/windowsvista/aa906023.aspx

     

    http://technet.microsoft.com/en-us/windowsvista/aa905108.aspx

     

    ^^ Both of the links are broken..(:


    Sunday, August 15, 2010 7:46 PM