This is expected behavior. Now what happens if this user runs ADUC? Remember what happened previously? You might expect that since the user has no rights on the domain that ADUC would simply let the user in to browse the domain.
This shouldn't be considered an "administrative task" because the user doesn't actually have the rights to make any changes in our domain. But again, Vista has no idea what is happening out in the domain, it is only making decisions based on what it can see locally.
Since the user is a member of the local Administrators group, it decides that an "administrative task" might be occurring and prompts for consent. At this point you might be thinking "You're splitting hairs Gord, I can live with an extra Consent Prompt. Here's where the wheels fall off. If the user just wanted to browse the Active Directory then an extra Consent Prompt is no big deal.
But what if a change in the domain is needed? Obviously this user doesn't have the rights, but he likely has a Domain Administrator doing some "over the shoulder" work for him. This Domain Administrator has probably walked up and seen what the user's problem is and now wants to quickly tweak something in the user's AD profile or something.
It presents the Consent Prompt. The Consent Prompt does not offer a way to enter any credentials for another user. You either Continue or Cancel. UAC actually entirely prevents the "over the shoulder" Domain Administrator from being able to do his work. If the user had been a lowly local User , then a Credentials Prompt would have been presented and the Domain Administrator could have continued on with his work. Now at this point some of you experienced enterprise admins are smirking to yourselves thinking I have forgotten about the secret Run As I've got news for you - in Vista it is now called " Run As Administrator " and it won't work.
More about this in a future article. Another work around to this problem is to do a "Fast User Switch" where the domain admin quickly creates a second session for himself where he can do his work. But there are problems with Fast User Switching which cause some organizations to turn this feature off. Like many Vista features, there are many ways to use UAC but there are also many unexpected behaviors that manifest themselves.
Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. Windows Vista Explorer via Runas Asked 12 years, 2 months ago. Active 2 years, 5 months ago. Viewed 1k times. I would kill for something closer to sudo.
Am I completely missing something obvious? Improve this question. Boden Boden 4, 11 11 gold badges 45 45 silver badges 68 68 bronze badges.
I may be being dumb here, but wouldn't UAC help you out here? Perhaps it could Add a comment. Active Oldest Votes. You are doing the right thing running as a limited account. Fast user switching is a good method, but if it is causing you headaches, then Improve this answer. Jonesome Reinstate Monica Jonesome Reinstate Monica 5, 9 9 gold badges 51 51 silver badges 78 78 bronze badges. From another form post I found out that if you kill explorer.
Also, if I run iexplore. We have an app that we need to login twice. Now we use a local instance of IE and one from Citrix. The application is ActiveX based and will detect the other login and log out both sessions We'd love to get rid of Citrix, but I can't really have my users running IE as administrators. Friday, April 3, PM. Sorry about my late reply as I discovered this just now.
And thanks Michael for your suggestion. Thursday, June 18, AM. Thanks Milind it helped me too. Thursday, October 29, PM. Unfortunately, I am in this boat still only everybody is sitting on the upper deck while I am drowning in steerage. I have read everyone of the posts that popped in google and nothing is helping me out.
I am simply trying to add a printer to this computer. Keeps coming back with the error that I need to log on as admin. I use the compatability tab it is greyed out. I am not someone who wants to play with regedit. That would be computer homicide.
How quickly will I get my solution? We can't guarantee quick solutions - Experts Exchange isn't a help desk. We're a community of IT professionals committed to sharing knowledge. Our experts volunteer their time to help other people in the technology industry learn and succeed. Plans and Pricing. Contact Us. Certified Expert Program.
0コメント