Windows 10: Administrator Account Dumbed Down in Win10

Page 1 of 3 123 LastLast
  1.    08 Oct 2014 #1

    Administrator Account Dumbed Down in Win10


    Starting to find that the built-in Administrator account is a bit crippled - "This app can't open ... can't be opened using the Built-in Administrator account. Sign in with a different account and try again."

    (I always log in with the built-in Administrator account so this could be a deal killer for me.)

    Also can't delete some apps from start menus (even as Admin) such as:
    > OnDrive
    > Store
    > Camera
    > Documents

    THESE are indeed deal breakers. As Admin I haven't found how to delete Store and OneDrive from Guest accounts. Tried to edit the reg but so far I haven't hit the right combinations to rib the guest account of these security issues.

    Ideas how to remove Store and OneDrive?

    Regards,
    GEWB
      My ComputerSystem Spec

  2.    08 Oct 2014 #2

    The built in Administrator account, unlike one you would create yourself, is always elevated with full privileges and unaffected by UAC. By design for security reasons you cannot run Apps with an elevated account. This is not new but goes back to Windows 8.

    The Administrator account was never intended for general use. It is recommended that you create and use your own account with admin privileges. This account will be restricted by UAC. Even better would be to create a limited account for regular use but many people find this too inconvenient.

    Security is compromised when you run with full time elevated privileges. By default all applications you run will inherit your rights and privileges. This is convenient. The problem arises when you accidentally run malicious code. Even the very best AV product with the latest definitions will not always protect you from this. That malicious code will have all of your elevated rights and be able to do anything it wants. When using a limited account or an admin account protected by UAC those rights will be limited and that malicious code will be much limited in what it can do. Malware can evade such protection but it offer an additional level of protection. And in the battle with malware you need all the advantages you can get.
      My ComputerSystem Spec

  3.    08 Oct 2014 #3

    LMiller7 said: View Post
    The built in Administrator account, unlike one you would create yourself, is always elevated with full privileges and unaffected by UAC. By design for security reasons you cannot run Apps with an elevated account. This is not new but goes back to Windows 8.
    I love the "...way back to Windows 8."
    (I go way back to Windows 2.0 and I don't mean the binary of Windows 10.)

    I hated 8 - so never got to find this issue.

    I'll not get into a scrap over the Admin account - I'll accept that you mean well and are not trolling.

    Regards,
    GEWB
      My ComputerSystem Spec


  4. Posts : 804
    10 Pro Preview x64
       08 Oct 2014 #4

    GEWB said: View Post
    I love the "...way back to Windows 8."
    (I go way back to Windows 2.0 and I don't mean the binary of Windows 10.)

    I hated 8 - so never got to find this issue.

    I'll not get into a scrap over the Admin account - I'll accept that you mean well and are not trolling.

    Regards,
    GEWB
    What is your point? You can't run modern apps as built in administrator. That is the design. You could use a normal account which is part of administror group and turn down UAC. Administrator is NOT the same as in XP.

    He is not trolling - it is how it works.
      My ComputerSystem Spec

  5.    08 Oct 2014 #5

    GEWB said: View Post
    Starting to find that the built-in Administrator account is a bit crippled
    LMiller7 said: View Post
    ... By design for security reasons you cannot run Apps with an elevated account...
    adamf said: View Post
    You can't run modern apps as built-in administrator. That is the design.
    Click image for larger version. 

Name:	local.jpg 
Views:	3180 
Size:	6.9 KB 
ID:	6508

    If you are the Administrator,
    using the built-in Administrator account,

    have access to secpol.msc,
    and you are allowed to make changes,
    you are responsible for the changes you make.

    run secpol.msc > local policies > Security Options > User Account Control: Admin Approval Mode for the Built-in Administrator Account > Enabled
    _________________________________
    Also need to check >

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    EnableLUA is set to 1


    Sign Out or Reboot

    _________________________________
    Now, Store Apps a.k.a. the metro can be used using the built-in Administrator Account

    I have been running metro apps in Server 2012 using the built-in Administrator Account since its release.


    The Store App can be disabled using the group policy editor (gpedit.msc)

    run gpedit.msc > Local Computer Policy > Administrative Templates > Windows Components > Store > Turn off the Store application

    __________________________________

    As Administrator, UAC can be manually adjusted from the action center.

    Microsoft OneDrive faq
    OneDrive: FAQ - Windows Help
    OneDrive enable or disable tutorial -

    OneDrive Integration in Windows 8.1 - Enable or Disable


    Built-in Administrator Account running metro apps in Windows 10
    Click image for larger version. 

Name:	built-in Administrator.jpg 
Views:	7692 
Size:	402.2 KB 
ID:	6507
    Last edited by mdmd; 08 Oct 2014 at 15:38.
      My ComputerSystem Spec

  6.    08 Oct 2014 #6

    Hi

    If you are talking about the Metro style panel on the start menu...

    I didn't have to do anything to remove the apps from the start menu.
    I just right clicked on them and selected remove from start.

    They went away and didn't come back.




    If you mean remove them from the All Apps list, then there is an uninstall button.

    I uninstalled the Health and Fitness app (I don't have either, I'm 76 LOL) and it went away.

    Mike
    Attached Thumbnails Attached Thumbnails Screenshot (1).jpg  
      My ComputerSystem Spec

  7.    08 Oct 2014 #7

    Hello Mike.
    On this point, there are some embedded apps that cannot be uninstalled.

    Click image for larger version. 

Name:	camera.jpg 
Views:	3162 
Size:	11.9 KB 
ID:	6510

    If one opens the file location from a protected area,
    the shortcuts could be deleted but that would hose the system.

    Click image for larger version. 

Name:	protected.jpg 
Views:	3171 
Size:	21.6 KB 
ID:	6512
      My ComputerSystem Spec

  8.    08 Oct 2014 #8

    This sounds like the stuff we have in Windows 8 too.

    There was an app that added a command to the right click drop down that would force it to let you access them.

    Maybe we're talking about different things but, when I right click on the Documents folder as you have shown I also have an option "Remove From List".




    Mike
    Last edited by MikeHawthorne; 08 Oct 2014 at 16:23.
      My ComputerSystem Spec


  9. Posts : 487
    Windows 7/64 Professional
       08 Oct 2014 #9

    @ GEWB

    LMiller7 is not a troller by any definition one could use.

    LMiller7 is highly respected member of this forum and the Seven Forum.
    He has helped many with this knowledge and willingness to help others.

    LMiller7 post #2 was correct advice.

    One doesn't have to take the advice. I'm one that cheats a little on such things.
    I won't post how because their are many all over the world that read our post.
    I try to keep that in mind when posting.
      My ComputerSystem Spec


  10. Posts : 8,313
    Windows 10 Professional
       08 Oct 2014 #10

    GEWB said: View Post
    Ideas how to remove Store and OneDrive?
    There are four default 'Modern' Apps that you cannot uninstall/remove; 'Store', 'OneDrive', 'Camera' and 'Photos'.
    To remove them from all Start Menu lists, you will have to 'hide' them, however, you will not be able to use them or invoke an instance of them in a 'hidden' state, and it may cause some corruption of information and/or content executed by the apps previously.

    But, if you haven't used them and don't plan to, you'll need to navigate, (as Administrator), to:
    "C:\ProgramData\Microsoft\Windows\Start Menu\Programs"
    (Make sure you are showing hidden files, folders and drives in 'Folder Options')
    Once there you need to create a new folder, (call it what you wish), then cut and paste the desired shortcuts, of the four, into that folder. (You will have to confirm 4 warnings for each shortcut you move; just click on 'Yes', 'Yes', 'Continue' and 'Yes' again)
    Once the shortcuts are in the new folder, select the folder and choose 'Hide selected items' on the Tools Ribbon and click OK on the confirmation dialog.
    The results should be immediate.
    DO NOT touch any of the other 'Modern/Immersive' shortcuts!

    Edit: On a caution note: if you are signed on with an MS account, using OneDrive, you may experience further file corruption!
    Use some common sense discretion and create a restore point if you have any reservations.
    Last edited by Edwin; 08 Oct 2014 at 17:29.
      My ComputersSystem Spec


 
Page 1 of 3 123 LastLast

Related Threads
How to Enable or Disable Built-in Elevated Administrator Account in Windows 10 This tutorial will show you how to enable or disable the hidden built-in elevated Administrator account in Windows 10. You must be signed in as an administrator...
Apps & Features Run as Administrator in Windows 10 in Tutorials
How to Run an App as Administrator in Windows 10 Some legitimate applications require a full administrator access token (elevated) to perform their functions or tasks. For example, when a program that you are trying to run is giving you a Access...
I installed Windows 10 from Windows 7, and now I can't open Settings using my account (which is an administrator account). I apparently have to use a different account, but I don't have one, and with no access to Settings, I can't make another...
administrator group in AntiVirus, Firewalls and System Security
I forget; how do i make my user a member of the administrator group?
Solved Appointing System Administrator in Windows Updates and Activation
I can't change my Windows Update settings. It says 'Some settings are managed by your system administrator' How do I become the System Administrator? My user account type is Administrator! My problem may be linked to the fact that I deleted...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 01:18.
Find Us