Thursday, June 7, 2012

Elevate All Administrator Accounts UAC Privilege Level



information   Information
This will show you how to change all administrator account's UAC Privilege Level to keep UAC on and not prompt an admnistrator, have UAC ask administrator for password, or the default of asking an Administrator to Continue for permission. UAC will still be on and work as usual for the Standard and Guests account types. For more information, see:
Note   Note
This will still leave Protected Mode: ON in Internet Explorer to.
Tip   Tip
To Have UAC Progam Exceptions to not have UAC ask for your permission on certain programs in Vista only, then you can use the Norton UAC Tool for this. This program will not work in Window 7.
warning   Warning
This can only be done while logged on to an administrator account.








OPTION ONE

Using a REG File Download
1. To Elevate Administrators Privilege Level for no Prompting by UAC
NOTE: When you elevate the administrator accounts privilege level, the Security Center in Vista will give you an alert warning notification in the notification area of the taskbar until you undo this. To turn this alert off, see: How to Disable or Enable the Security Center Alert Warning Notification in Vista.
A) Click on the download button below to download the file below.
Elevate_Administrator_Priviledge.reg

B) Go to step 4.
2. To Have UAC Prompt Administrators for a Password
NOTE: This will act just like it does in a Standard account by UAC asking you for the administrator's password before continuing.
A) Click on the download button below to download the file below.
Administrator_UAC_Require_Password.reg

B) Go to step 4.
3. To Have UAC Prompt Administrators for a Continue or Yes
NOTE: This is the default setting for UAC asking the administrator to click on Continue (Vista) or Yes (Windows 7) to give permission.
A) Click on the download button below to download the file below.
Restore_Default_Settings.reg



4. Click on Save, and save the .reg file to the Desktop.

5. Right click on the downloaded .reg file and click on Merge.

6. Click on Run, Continue (UAC-Vista) or Yes (UAC-Windows 7), Yes, and then OK when prompted.

7. Log off and log on, or restart the computer to apply the changes.

8. When done, you can delete the downloaded .reg file if you like.




OPTION TWO

Through Local Security Policy

NOTE: This method is only available for the Vista Business, Ultimate, and
1. Open the Local Security Policy editor.

2. In the left pane, click on Local Policies. (See screenshot below step 5)

3. Click on Security Options.

4. In the right pane, double click on User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode.
policy.jpg
5. To Elevate Administrators Privilege Level for no Prompting by UAC
NOTE: When you elevate the administrator accounts privilege level, the Security Center in Vista will give you an alert warning notification in the notification area of the taskbar until you undo this. To turn this alert off, see: How to Disable or Enable the Security Center Alert Warning Notification in Vista
A) Click on the drop down arrow and change the setting to Elevate without prompting. (See screenshot below step 8)

B) Go to step 8.
6. To Have UAC Prompt Administrators for a Password
NOTE: This will act just like it does in a Standard account by UAC asking you for the administrator's password before continuing.
A) Click on the drop down arrow and change the setting to Prompt for credentials. (See screenshot below step 8)

B) Go to step 8.
7. To Have UAC Prompt Administrators for a Continue or Yes
NOTE: This is the default setting for UAC asking the administrator to click on Continue (Vista) or Yes (Windows 7) to give permission.
A) Click on the drop down arrow and change the setting to Prompt for consent. (See screenshot below step 8)
8. Click on OK to apply.
uac.jpg
9. Close the Local Security Policy window. Your Done.



OPTION THREE

Manually Using Registry Editor
1. Open the Start Menu.

2. In the white line (Start Search) area, type regedit and press Enter.

3. If prompted by UAC, then click on the Continue (Vista) or Yes (Windows 7).

4. In regedit, go to: (See screenshot below)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

5. In the right pane, right click on ConsentPromptBehaviorAdmin and click on Modify.
reg.jpg
6. To Elevate Administrators Privilege Level for no Prompting by UAC
NOTE: When you elevate the administrator accounts privilege level, the Security Center in Vista will give you an alert warning notification in the notification area of the taskbar until you undo this. To turn this alert off, see: How to Disable or Enable the Security Center Alert Warning Notification in Vista.
A) Type 0 (Number) and click on OK. (See screenshot below step 8)

B) Go to step 9.
7. To Have UAC Prompt Administrators for a Password
NOTE: This will act just like it does in a Standard account by UAC asking you for the administrator's password before continuing.
A) Type 1 and click on OK. (See screenshot below step 8)

B) Go to step 9.
8. To Have UAC Prompt Administrators for a Continue or Yes
NOTE: This is the default setting for UAC asking the administrator to click on Continue (Vista) or Yes (Windows 7) to give permission.
A) Type 2 and click on OK.
modify.jpg
9. Close regedit.

10. Log off and log on, or restart the computer to apply the changes.

Vbs To Silently Import Reg Files

Vbs Script:

Set oShell = CreateObject("Wscript.Shell")

'Your .Reg file and path goes here as in the example below
sRegFile = "C:\Temp\MyFile.Reg"

'This line runs Regedit in silent mode
oShell.Run "regedit.exe /s " & Chr(34) & sRegFile & Chr(34), 0, True

How to Create a Elevated Program Shortcut without a UAC Prompt


information   Information
This will show you how to create a elevated "Run as administrator" shortcut of any installed program in Windows using Task Scheduler so that it will not give you a UAC prompt for permission when you start it while still having UAC turned on.

In the tutorial, you will first create a new task, then a new shortcut to run the task. Afterwards, how to change the icon of the shortcut.

Note   Note
Special thanks to OEM for pointing this out, and the previous Vista version by DMEX.

You can run at startup as a task, Pin to Start Menu, Pin to Taskbar, assign a keyboard shortcut to the shortcut created below, or move to where you like for easy use.


warning   Warning
  • This shortcut and task can only be created and work while logged in as an administrator account.
  • This shortcut will not work in a standard user account.




Here's How:1. Open the Start Menu, then type taskschd.msc in the search line and press enter.
NOTE: This will open Task Scheduler. This file is located at:
C:\Windows\system32\taskschd.msc.

2. While having Task Scheduler Library selected in the left pane, click on Create task in the far right pane. (see screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step1.jpg
3. Under the General tab, type in the "Name" of the program you want to create this shortcut for. (See screenshot below)
NOTE: This will be the name of the task. As an example, I will use CCleaner for that program. Make note of this name, you will need it later in step 12 below.
Elevated Program Shortcut without UAC Prompt - Create-step2.jpg
4. Check the Run with highest privileges box. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step3.jpg
5. Click on the Configure for drop down box to open it, and select Windows® 7, Windows Server™ 2008 R2. (see screenshot above and below)
NOTE: This is like compatibility mode. If the program does not support running in Windows 7 normally, then you can select the OS that is does support running in instead to have it run in compatibility mode as if it was running in that OS instead of Windows 7.
Elevated Program Shortcut without UAC Prompt - Create-drop_down_box.jpg
6. Click on the Actions tab, then on the New button. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step4.jpg
7. Under "Action", select Start a program and click on the Browse button. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step5.jpg
8. Navigate to the .exe file of the program that you want to create this shortcut for, then select it and click on Open. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step6.jpg
9. Click on OK. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step7.jpg
10. Click on the Conditions tab, and uncheck the Stop if the computer switches to battery power box first, then uncheck the Start the task only if the computer is on AC power box. (See screenshots below)
NOTE: This step is mostly for laptops, so that you will be able to run the program when the laptop is running on battery power.
Elevated Program Shortcut without UAC Prompt - Create-step8.jpgElevated Program Shortcut without UAC Prompt - Create-conditions.jpg
11. Click on OK. (See screenshots above)

12. You will now see your new task created with the name (ex: CCleaner) you gave it in step 3. Close Task Scheduler. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step9.jpg
13. Right click on a empty area of the desktop, then click on New and Shortcut.

14. Type in schtasks /run /tn task-name for the location, then click on the Next button. (See screenshot below tip)
Tip   Tip
Subsitute task-name with the name that you used in step 3 and see in step 12 (ex: CCleaner).
NOTE: Note the space after schtasks, run, and tn in the commands below.

For a Name without Spaces - For example, type:
schtasks /run /tn CCleaner
For a Name with Spaces - You will need to have quotes around the name if it has spaces. For example, type:
schtasks /run /tn "CCleaner Program"
Elevated Program Shortcut without UAC Prompt - Create-step10.jpg
15. Type in a name you want for the shortcut (ex: CCleaner), then click on the Finish button. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step11.jpg
16. Right click on the new shortcut (ex: CCleaner) on the desktop, then click on Properties.

17. Click on the Shortcut tab and on the Change Icon button. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step12.jpg
18. Click on OK. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step13.jpg
19. Click on the Browse button. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step14.jpg
20. Navigate to the .exe file of the program that you have created this shortcut with, then select it and click on Open. (See screenshot below)
NOTE: If you have a icon of your own that you would prefer to use instead, then navigate to where you have that icon saved at instead.
Elevated Program Shortcut without UAC Prompt - Create-step15.jpg
21. Select the icon you want for the shortcut, then click on OK. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step16.jpg
22. Click on OK. (See screenshot below)
Elevated Program Shortcut without UAC Prompt - Create-step17.jpg
23. You can now run at startup as a task, Pin to Start Menu, Pin to Taskbar, assign a keyboard shortcut to the shortcut, or move to where you like for easy use.

Note   Note
If you would like to stop the quick flashing CMD pop-up when using the shortcut, then you can do this below to do so.
  • Right click on the shortcut and click on Properties.
  • Click on the Shortcut tab.
  • Select Minimized in the drop down menu to the left of Run, and click OK.

24. When you run this new elevated shortcut, you will now no longer have to click on YES to approve the UAC prompt to allow the program run as administrator.