Admin Account Aking for Admin permissions.

It nomally only asks if you going to folders owned by system or another user

Carica said:

so any chance of changing administrator permissions to became as close or equal to TrustedInstaller?.

If you go to Settings > Accounts > Your Info and it says Local Account/Administrator... that's about as good as you can do, unless you log on to THE Administrators account.

I'm no fan of the direction Microsoft has taken, BUT... I'd say 75% of the things that demand higher levels of access, probably shouldn't be messed with anyway.

For things you absolutely need to do, but Windows 10 won't let you... there are work arounds.
Most are here on Ten Forums, in the tutorials. Some require a Google or two.

One thing many of us have found that helps a LOT, is Winaero Tweaker.
Winaero Tweaker











Every tweak can be turned on or off with a check box.
And every tweak has a link to a description of "How it's done".

Carica said:

Im going nuts with this new level of protection.

It is the same as it has been since Windows 7.

RickC said:

Blame Microsoft for taking something so simple and making it really, really difficult for most people to get their heads around, i.e. Windows' security hierarchy and the difference between the Administrator and users with an account in the Administrators group.

RickC said:

The most-privileged accounts are System and TrustedInstaller then, one step down the hierarchy, the Administrator. Further down the hierarchy yet again are accounts in the Administrators group.

Ghot said:

If you go to Settings > Accounts > Your Info and it says Local Account/Administrator... that's about as good as you can do, unless you log on to THE Administrators account.

The Built-In Admin [that you both refer to as "the Administrator"] has no more capabilities than any Admin account with UAC turned off.
The Built-In Admin is not in any sense 'above' Admin accounts that you create.
The Built-In Admin is just an Admin account that happens to be created for you & that happens to bypass UAC by default.

RickC said:

The first account created after the Out Of the Box Experience (OOBE) is automatically made a member of the Administrators group... but will often need temporary elevation to the Administrator, for example when installing new software.

No, that is not what happens. The dialog is used to invoke an Admin account's Admin 'token' and this has nothing to do with the Built-In Admin.

Denis

Try3 - I was trying to keep it really simple for the OP and answer his/her question in a manner that was quickly understandable rather than deep-dive into resources and their ACL's... nothing more.

Hence my attempt to differentiate between 'Admin' accounts - i.e. the built-in Administrator and members of the Administrators group - without even touching upon the possible unintended side effects of lowering UAC levels.

RickC said:

Try3 - I was trying to keep it really simple for the OP and answer his/her question in a manner that was quickly understandable rather than deep-dive into resources and their ACL's... nothing more.
Hence my attempt to differentiate between 'Admin' accounts - i.e. the built-in Administrator and members of the Administrators group - without even touching upon the possible unintended side effects of lowering UAC levels.

Rick,

But your statements were false.

RickC said:

Hence my attempt to differentiate between 'Admin' accounts - i.e. the built-in Administrator and members of the Administrators group

There are no differences.

Denis