Full administrator privileges?

Morph000 · Nov 14, 2024

When I setup my pc from new 2 weeks ago I specified my account to be in the administrator group.

When I tried renaming a shortcut of an app I just installed, I got "You'll need to provide administrator permission to rename this folder"
I can change it ok, but it's annoying that as an administrator I'm being asked., and UAC is off.
Can I get full system privileges for an admin account?
Yes, I know the issues with such power from a security point, the upcoming PIN admin access feature, and that I can take ownership.

antspants · Nov 14, 2024

Windows is confirming that you have the correct privileges to rename certain folders and files on your C Drive regardless of UAC or Admin Privileges. This is by design.
I am not even sure that it wouldn't show even if you were running the built in Admin account.
You would need to make some pretty severe changes to the ownership of your C Drive to override this.
That, in my opinion, would be a big mistake.

However I could be proven wrong, you'll have to wait and see what others say..

Ghot · Nov 14, 2024

Just to make sure...
Can you post a screenshot of the Your Info page of Account in Settings?
If your email shows on the Your Info page... blank it out.

To post a screenshot on this forum...

1. Take the screenshot, (or camera pic), edit it as desired, save to your desktop as .png or .jpg (max. size = 2MB)
2. Left click in your post, where you want to place the screenshot.
3. Click the Attach Files button at lower left, browse to your image and select it.
4. Then click Insert, I usually choose the Thumbnail (smaller) option, or there is a Full Image (larger) option.

If the "new" PrtSc key function is not to your liking... here is how to set it back to it's classic function...

Enable or Disable Use Print Screen Key to Open Screen Snipping in Windows 11

This tutorial will show you how to turn on or off to use the Print Screen key to open screen snipping for your account in Windows 11. The Snipping Tool app includes a built-in screen recorder and allows you to quickly take and annotate screenshots, photos and other images with your pen, touch...

www.elevenforum.com

Mine looks like this...

antspants · Nov 14, 2024

You could see if this still works?

Type in Windows search bar “Administrative Windows Tools”
Click to open.
Administrative Windows Tools > Local Security Policy
Local Security Properties window will open
Local Polices > Security Options
Go down to User Account Control: Run all administrators in Admin Approval Mode
Click on it and change to Disabled
Reboot

glasskuter · Nov 14, 2024

Only the hidden administrator account has full unrestricted access rights to the PC. That's why it's considered a security risk for one to keep it activated permanently. It's also a means of emergency access to the system. If it gets corrupted there's no way for a user to get in. It's hidden for a reason.

It's normal to get the same message with some apps if one trys to rename its shortcut.. For example, when I renamed Malwarebytes to MWB to shorten it. I clicked Ok, it changed, and I went about my business. I mean, how often does one rename app shortcuts or how long does it take to click Ok for UAC.? Certainly not often enough from a security standpoint for me to use the Hidden Administrator account as my daily user account.

hdmi · Nov 15, 2024

glasskuter said:
Only the hidden administrator account has full unrestricted access rights to the PC.

No, the built-in administrator account has high-level access and can perform most tasks on a Windows system. However, the System account has even higher privileges for certain operations, especially those tightly integrated with the operating system and core services. In practice, the built-in administrator can invoke tasks that require System level access, but there are certain low-level operations and access permissions exclusively granted to the System account. This distinction helps ensure system stability and security by compartmentalizing access rights appropriately.

Morph000 · Nov 15, 2024

Run all administrators in Admin Approval Mode

Thanks to antspants - that fixed it.
I'm sure I saw a link elsewhere about this policy tweak, but I suspect they posted an incorrect key so I didn't see it in the list.

antspants · Nov 15, 2024

Morph000 said:
Thanks to antspants - that fixed it.
I'm sure I saw a link elsewhere about this policy tweak, but I suspect they posted an incorrect key so I didn't see it in the list.

Glad you sorted it. Cheers

LesFerch · Nov 16, 2024

Morph000 said:
and UAC is off.

When you say "UAC is off", do you mean that the slider is moved down to "Never notify"? If so, that still doesn't enable full administrator privileges. To have full administrator privileges for all "Administrator" accounts (like the account named "Administrator"), set this registry value:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=dword:0

Which is the same as setting the policy using the policy editor (as @antspants explained).

Of course, SYSTEM privileges are higher yet (as @hdmi explained) and TrustedInstaller is a service that adds another level.

Josey Wales · Nov 16, 2024

Add Change Owner to Context Menu in Windows 11

This tutorial will show you how to add Change Owner to the context menu of all files, folders, and drives for all users in Windows 10 and Windows 11. An owner is assigned to an object when that object is created. By default, the owner is the creator of the object. No matter what permissions are...

www.elevenforum.com

The above shows how to change the Owner

Full administrator privileges?

Active member

My Computer

Like a rolling drone.

My Computers

Well-known member

To post a screenshot on this forum...​

My Computers

Like a rolling drone.

My Computers

aka Mama Glass

My Computers

Jack of all trades – master of none

My Computers

Active member

My Computer

Like a rolling drone.

My Computers

Well-known member

My Computer

Endeavor to Persevere

My Computers

Similar threads

To post a screenshot on this forum...