Solved

Windows 8 UAC and Server domain issue

Posted on 2013-01-11
10
737 Views
Last Modified: 2013-02-06
I have a problem with Windows 8 UAC.

A client has some golf club related applications on a number of client PCs with the data held in Windows server 2008. When the applications are run they ask to be run as administrator. This has not happened under XP or Windows 7 and the program developers have not changed this aspect of the applications.

The result of this is that in order to run the apps the user has to enter the server administrator user name and password (i.e. Administrator). Clearly not a good idea apart from being a nuisance.

I have tried moving the UAC slider down to the bottom level but since the user is logged on to the server domain UAC greys out the bottom two levels on the slider and says you have to be logged in as an administrator to change to these levels.

I have tried adding the users to the administrator group on the server via Active Directory but this has no effect.

Can anyone think of a way to get round this so as to get the slider down to the bottom but without disabling all the metro type apps (as per a registry tweak I found on the Internet)?

Or some other approach?
0
Comment
Question by:grapey100
10 Comments
 
LVL 9

Expert Comment

by:djsharma
ID: 38766299
Reinstalled the application and install the application in windows 8 with user login.
0
 

Author Comment

by:grapey100
ID: 38766384
djsharma: Thanks, I did install the application with the server domain user login.

Do you mean with the local PC domain user login?
0
 
LVL 7

Expert Comment

by:PaulNSW
ID: 38766573
Try installing the software into another folder you create on the root of the drive, eg c:\golf_apps\xxxxxxx.

Usually programs will need Admin access if they are writing to protected areas on the hard disk, or need to have direct access to hardware attached.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 38766795
Hi.

You can adjust that behavior by creating a so-called shim.
http://blogs.technet.com/b/askperf/archive/2010/08/27/act-suppressing-elevation-prompts-for-legacy-applications.aspx
The runasinvoker shim is a tiny code applied to the client that only tells it not to request admin rights for that very program and no more. Easy to produce and apply, even domain wide deployment can be scripted. Did this several times in your situation.

PS: You wrote "have tried moving the UAC slider down to the bottom level but since the user is logged on to the server domain UAC greys out the bottom two levels on the slider and says you have to be logged in as an administrator to change to these levels."
That's wrong. Domain membership does not invoke this behavior. We have win8 here domain joined and could adjust that setting. Of course all UAC adjustments are system wide, so you have to be admin anyway, same with win7.
0
 

Author Comment

by:grapey100
ID: 38785107
McKinife,

Thanks for your suggestion. I tried it and it appeared to work in that the program didn't immediately ask for an administrator level user name and password. Problem was that the program just didn't start!

Re your PS, unfortunately that's what happens. At the lower two levels on the slider it says you have to be signed in as an administrator and the Next button is greyed out.

Not sure where I go next!
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 53

Expert Comment

by:McKnife
ID: 38785145
Please upload a screenshot of the slider and the message you have quoted.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 38785157
You could also try to analyse if that program does indeed try to write to protected areas of the registry or file system on launch. Use procmon to monitor that.
0
 

Author Comment

by:grapey100
ID: 38786181
McKnife - I will get you a screenshot but I am not at client site for a few days.
0
 

Accepted Solution

by:
grapey100 earned 0 total points
ID: 38843186
I finally came up with an answer on this - rather embarrassing really! What I didn't do was to add the client user account as an Administrator using Manage User Accounts, within Control Panel. Once I had done this the problem went away! I did this while logged in to the client user account on each PC attached to the server.
0
 

Author Closing Comment

by:grapey100
ID: 38858678
While this appeared to be a problem caused by the subtle changes to UAC from Windows 7 to Windows 8, it turned out to be a simple step that I should have carried out when setting up or upgrading the PCs to Windows 8.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

No matter the version of Windows you are using, you may have some problems with Windows Search running too slow or possibly not running at all. Before jumping into how you can solve this issue, just know there are many other viable alternative deskt…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now