Can someone tell me how I might secure a CMD as a non Administrator CMD?

I was recently upset to find out I have only Administrative CMD windows when I open any cmd (command prompt) in Windows 7
Now most of the time that is fine but
as the User is an administrator of their machine is this normal behavior these days 2015?
Or should I be concerned?   I seem to recall that CMD without the Administrative checkbox in the shortcut properties indicates non-administrator mode but as I can  startup/shutdown services in any of my CMD windows(e.g. net start  xyzserver)
 I have to figure they all are Administrator CMDs
despite the silly check box.
That does not seem right to me.  Any comments on this?
Otherwise things seem fine.
LVL 2
Robert SilverSr. Software EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NVITCommented:
Do you mean each time you run it, it only runs as admin?

Is the logged on user an admin?
0
Ian MeredithCommented:
There are a few different situations that lead to this behaviour.... UAC, User profile priviliges, Registry keys missing.....
Investigate the one that applies to you....
http://stackoverflow.com/questions/8560516/stop-cmd-from-always-opening-with-administrator-privileges
0
MacleanSystem EngineerCommented:
Pretty sure Ian is correct, this is most likely UAC being disabled.
0
Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

Robert SilverSr. Software EngineerAuthor Commented:
NewVillageIT (NVIT)  - Yes user is logged on as an admin. It is hard to have a user who is not a local administrator of their machine frankly I have found unlike a Linux box for example.

I checked out the link specified by Ian but it did not check out. No such key or value in the registry.

I only found two entries with key values containing cmd.exe
cmd-registrysettings.png
0
NVITCommented:
> ...as the User is an administrator of their machine is this normal behavior...
If UAC is at lowest level, Never Notify, then... Each time you run CMD, the window title shows as "Administrator: Command Prompt". The user DOES NOT have to be an admin,

If UAC is Default, window title should show as "Command Prompt". Even for an admin user. Mine does here.

Also check the Properties of the Command Prompt shortcut. Advanced.

Also check... HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
There may be a key for cmd.exe with a Value of RUNASADMIN.
0
McKnifeCommented:
There are three possible reasons for that behavior:

1 UAC is off (="never notify)
2 he uses the built-in account "administrator"
3 he modified the default UAC setting for admins in approval mode (he would know)
0
Robert SilverSr. Software EngineerAuthor Commented:
Okay most alarming this is a Windows 7 Professional  version
I have attached the absolute Key path from HKEY_CURRENT_USER as you have suggested
There is no Layers key at all:
Please see image file attached
cmd-regsitry-tree-area.jpg
0
NVITCommented:
What does UAC show for the user?
0
Robert SilverSr. Software EngineerAuthor Commented:
Please advise - Also I do not wish to bring back those awful unproductive security prompts  that Microsoft sadly left as the default state either.

Like I said before. I am merely  concerned about this current state of my machine. I have all the patchs/hotfixes possible
Norton Internet Security, Norton System Recovery with backups going back to my last Ghost of 2011.
I do use Norton Utilities 16 which appears to keep my regsistry clean from problems except perhaps in this cas though I would be pretty sure Norton Utilities does not clean up CMD.exe entries.
Not sure why :
these keys are clearly missing though.  It would be good to understand why they are missing before I consider rebuilding my system from the start which probably would not happen.
The only issue which I believe after resending the file , a  GitHub.com client GIT utilty file to Norton I never heard back of any problems but I do have this issue show up upon running the NPE.exe program
I am attaching the file in case anyone  knows of any problems

As I said before I see no trojans or evidence of viruses / malware etc...
I will post the screen on my next entry.
0
MacleanSystem EngineerCommented:
Could it not simply be that on the image for the machines, the CMD.exe under c:\windows\system32 might have the "Run as admin" box ticked?
0
NVITCommented:
I assume UAC is currently set at Never Notify.

> ...I do not wish to bring back those awful unproductive security prompts
Then leave UAC as Never Notify. Then put the user as a non-admin. If they try to install programs, it won't work. They'll get the prompt.

> It is hard to have a user who is not a local administrator of their machine...
What do you mean with this?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Robert SilverSr. Software EngineerAuthor Commented:
Okay It seems one of those Techies who visited my machine changed the UAC(User Account Control) settings and rebooted
Thank you for making me aware. In fact you were correct. I verified it - Yes it was stuck in Never Notify
You really have to watch those tech support people like a hawk.
0
NVITCommented:
Glad you ironed that out, rssdds. Have a nice day.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.