Administrator Account Dumbed Down in Win10

Page 1 of 3 123 LastLast

  1. Posts : 116
    Several
       #1

    Administrator Account Dumbed Down in Win10


    Starting to find that the built-in Administrator account is a bit crippled - "This app can't open ... can't be opened using the Built-in Administrator account. Sign in with a different account and try again."

    (I always log in with the built-in Administrator account so this could be a deal killer for me.)

    Also can't delete some apps from start menus (even as Admin) such as:
    > OnDrive
    > Store
    > Camera
    > Documents

    THESE are indeed deal breakers. As Admin I haven't found how to delete Store and OneDrive from Guest accounts. Tried to edit the reg but so far I haven't hit the right combinations to rib the guest account of these security issues.

    Ideas how to remove Store and OneDrive?

    Regards,
    GEWB
      My Computer


  2. Posts : 1,255
    Windows 10 Pro
       #2

    The built in Administrator account, unlike one you would create yourself, is always elevated with full privileges and unaffected by UAC. By design for security reasons you cannot run Apps with an elevated account. This is not new but goes back to Windows 8.

    The Administrator account was never intended for general use. It is recommended that you create and use your own account with admin privileges. This account will be restricted by UAC. Even better would be to create a limited account for regular use but many people find this too inconvenient.

    Security is compromised when you run with full time elevated privileges. By default all applications you run will inherit your rights and privileges. This is convenient. The problem arises when you accidentally run malicious code. Even the very best AV product with the latest definitions will not always protect you from this. That malicious code will have all of your elevated rights and be able to do anything it wants. When using a limited account or an admin account protected by UAC those rights will be limited and that malicious code will be much limited in what it can do. Malware can evade such protection but it offer an additional level of protection. And in the battle with malware you need all the advantages you can get.
      My Computer


  3. Posts : 116
    Several
    Thread Starter
       #3

    LMiller7 said:
    The built in Administrator account, unlike one you would create yourself, is always elevated with full privileges and unaffected by UAC. By design for security reasons you cannot run Apps with an elevated account. This is not new but goes back to Windows 8.
    I love the "...way back to Windows 8."
    (I go way back to Windows 2.0 and I don't mean the binary of Windows 10.)

    I hated 8 - so never got to find this issue.

    I'll not get into a scrap over the Admin account - I'll accept that you mean well and are not trolling.

    Regards,
    GEWB
      My Computer


  4. Posts : 803
    10 Pro Preview x64
       #4

    GEWB said:
    I love the "...way back to Windows 8."
    (I go way back to Windows 2.0 and I don't mean the binary of Windows 10.)

    I hated 8 - so never got to find this issue.

    I'll not get into a scrap over the Admin account - I'll accept that you mean well and are not trolling.

    Regards,
    GEWB
    What is your point? You can't run modern apps as built in administrator. That is the design. You could use a normal account which is part of administror group and turn down UAC. Administrator is NOT the same as in XP.

    He is not trolling - it is how it works.
      My Computer


  5. Posts : 11
    Server 2012 / 8.0
       #5

    GEWB said:
    Starting to find that the built-in Administrator account is a bit crippled
    LMiller7 said:
    ... By design for security reasons you cannot run Apps with an elevated account...
    adamf said:
    You can't run modern apps as built-in administrator. That is the design.
    Administrator Account Dumbed Down in Win10-local.jpg

    If you are the Administrator,
    using the built-in Administrator account,

    have access to secpol.msc,
    and you are allowed to make changes,
    you are responsible for the changes you make.

    run secpol.msc > local policies > Security Options > User Account Control: Admin Approval Mode for the Built-in Administrator Account > Enabled
    _________________________________
    Also need to check >

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    EnableLUA is set to 1


    Sign Out or Reboot

    _________________________________
    Now, Store Apps a.k.a. the metro can be used using the built-in Administrator Account

    I have been running metro apps in Server 2012 using the built-in Administrator Account since its release.


    The Store App can be disabled using the group policy editor (gpedit.msc)

    run gpedit.msc > Local Computer Policy > Administrative Templates > Windows Components > Store > Turn off the Store application

    __________________________________

    As Administrator, UAC can be manually adjusted from the action center.

    Microsoft OneDrive faq
    OneDrive: FAQ - Windows Help
    OneDrive enable or disable tutorial -

    OneDrive Integration in Windows 8.1 - Enable or Disable


    Built-in Administrator Account running metro apps in Windows 10
    Administrator Account Dumbed Down in Win10-built-administrator.jpg
    Last edited by mdmd; 08 Oct 2014 at 15:38.
      My Computer


  6. Posts : 220
    Windows 10
       #6

    Hi

    If you are talking about the Metro style panel on the start menu...

    I didn't have to do anything to remove the apps from the start menu.
    I just right clicked on them and selected remove from start.

    They went away and didn't come back.

    Administrator Account Dumbed Down in Win10-screenshot-1-.jpg


    If you mean remove them from the All Apps list, then there is an uninstall button.

    I uninstalled the Health and Fitness app (I don't have either, I'm 76 LOL) and it went away.

    Mike
    Attached Thumbnails Attached Thumbnails Administrator Account Dumbed Down in Win10-screenshot-1-.jpg  
      My Computer


  7. Posts : 11
    Server 2012 / 8.0
       #7

    Hello Mike.
    On this point, there are some embedded apps that cannot be uninstalled.

    Administrator Account Dumbed Down in Win10-camera.jpg

    If one opens the file location from a protected area,
    the shortcuts could be deleted but that would hose the system.

    Administrator Account Dumbed Down in Win10-protected.jpg
      My Computer


  8. Posts : 220
    Windows 10
       #8

    This sounds like the stuff we have in Windows 8 too.

    There was an app that added a command to the right click drop down that would force it to let you access them.

    Maybe we're talking about different things but, when I right click on the Documents folder as you have shown I also have an option "Remove From List".




    Mike
    Last edited by MikeHawthorne; 08 Oct 2014 at 16:23.
      My Computer


  9. Posts : 983
    Windows 7/64 Professional
       #9

    @ GEWB

    LMiller7 is not a troller by any definition one could use.

    LMiller7 is highly respected member of this forum and the Seven Forum.
    He has helped many with this knowledge and willingness to help others.

    LMiller7 post #2 was correct advice.

    One doesn't have to take the advice. I'm one that cheats a little on such things.
    I won't post how because their are many all over the world that read our post.
    I try to keep that in mind when posting.
      My Computers


  10. Posts : 17,838
    Windows 10
       #10

    GEWB said:
    Ideas how to remove Store and OneDrive?
    There are four default 'Modern' Apps that you cannot uninstall/remove; 'Store', 'OneDrive', 'Camera' and 'Photos'.
    To remove them from all Start Menu lists, you will have to 'hide' them, however, you will not be able to use them or invoke an instance of them in a 'hidden' state, and it may cause some corruption of information and/or content executed by the apps previously.

    But, if you haven't used them and don't plan to, you'll need to navigate, (as Administrator), to:
    "C:\ProgramData\Microsoft\Windows\Start Menu\Programs"
    (Make sure you are showing hidden files, folders and drives in 'Folder Options')
    Once there you need to create a new folder, (call it what you wish), then cut and paste the desired shortcuts, of the four, into that folder. (You will have to confirm 4 warnings for each shortcut you move; just click on 'Yes', 'Yes', 'Continue' and 'Yes' again)
    Once the shortcuts are in the new folder, select the folder and choose 'Hide selected items' on the Tools Ribbon and click OK on the confirmation dialog.
    The results should be immediate.
    DO NOT touch any of the other 'Modern/Immersive' shortcuts!

    Edit: On a caution note: if you are signed on with an MS account, using OneDrive, you may experience further file corruption!
    Use some common sense discretion and create a restore point if you have any reservations.
    Last edited by Edwin; 08 Oct 2014 at 17:29.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:44.
Find Us




Windows 10 Forums