Administrator Privileges problems

I know we have touched on this before when I had tried to handle something in file explorer, and now the frustration has extended itself to the desktop.

I am really sick of W10 telling me that I need Administrator Privileges. This time it is to perform an operation to a shortcut on my desktop, but frankly, as I made my account an admin account purposely, for anything.

Has anyone found a way to make any Admin account actually have full Administrator Privileges?

As far as I know, the only true admin account with full access is the built in Administrator account, which is disabled by default.

Honestly, if you know what you are doing with the computer, you can turn off UAC, but that's about it. As long as you are aware of the risks, it cuts down on almost all prompts. I disable it on all of my computers, but that doesn't mean I tell everyone to do so.

If you think Windows 10 is annoying, then try OSX or Linux. Those prompts are there for a reason, and as someone who works in corporate IT, I'm thankful that Windows has been locked down.

Turning off UAC will give you full permissions, however if you do that a lot of functions of the OS won't work anymore, such as the Settings menu, Edge, and pretty much any app.

This function is there for a reason, and given the propensity of ransomware today, I would take every possible security advantage I can find, not purposely cripple them.

FYI, if you need admin permission for an icon on the desktop, it's because the icon was created with administrator rights. This is the sort of thing that UAC actually helps with, by giving you the rights you need when you need them

Hi,

Sounds as if the ACLs are messed up though.

Download and install this program here :

https://www.microsoft.com/en-us/down....aspx?id=23510

Then copy paste this in notepad, change the .txt extension to .bat and run with admin rights.

@echo off
title Resetting ACLs...
cd /d "%ProgramFiles(x86)%\Windows Resource Kits\Tools"
echo.
echo Resetting ACLs...
echo (this may take several minutes to complete)
echo.
echo ==========================================================================
echo.
echo System Drive...
subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
echo.
echo.
echo Windows Directory...
subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
echo.
echo.
echo ==========================================================================
echo.
echo FINISHED.
echo.
echo Press any key to exit . . .
pause >NUL

Cheers,

I have shut off UAC; I found it annoying. Perhaps we are using different terms here, for I still run Settings without any noticeable difference. I use Malwarebytes Anti-Ransomware beta and though have had two false positives, I feel if I ever do something stupid, it gives me enough extra margin of protection to have a comfort margin and if I ever was important enough to become target of an APT, sooner or later I suppose they would get me, but my assets are pretty much a waste of time.

I have a mild understanding the problems of corporate environment IT and am very happy that this is not my headache (for my time in a large corporate environment I became good friends with IT and also thought upper management (at Xerox) were complete horse's asses in many respects, including how they treated these guys).

I want full control.

Funny enough, the icon that I would like to blow away is the regular Malwarebytes desktop icon, and when I have a moment I will re-logon with the built in Admin account to get at it.

Mystere said:

Turning off UAC will give you full permissions, however if you do that a lot of functions of the OS won't work anymore, such as the Settings menu, Edge, and pretty much any app.

I have three computers of my own, plus 20 that have been rolled out in our company, all with UAC disabled, and we haven't had any issues yet. I've disabled UAC on my personal computers since the feature was first added to 7, and haven't ever been denied a feature or function of the OS.

All in all, I honestly do appreciate the safeguards being offered, and if they were simply offered as opposed to forced, I would be very happy.

I have seen people who purport to be computer savvy do incredibly stupid things (and one walk right into a ransom-ware trap, like seeing someone fall right into an open manhole).

I am simply looking for the ability to decide for myself and assume the consequences. It seems MS is acting like big government more and more; I find this repugnant, but also out of character; so I keep searching for someone who knows of the "off switch" to this admin rights double standard.
@fdegrove: Thanks, but I still am not allowed to delete the desktop icon. Time to reboot once again...

Hi,

Thanks, but I still am not allowed to delete the desktop icon.

Just an idea. Are you sure it's just a shortcut on the desktop and not the full executable? For, if it is then you'd first need to stop the program from running before you can delete it or move it to where you want it.

I've run into similar oddities as yourself and I know of a few things that can cause these. The Subinacl.exe batch file invariably solved it and put things back to their defaults.

UAC can be a PITA but not to the point of not letting you do standard operations such as you described.

Cheers,

brucemc777 said:

I have shut off UAC; I found it annoying. Perhaps we are using different terms here, for I still run Settings without any noticeable difference. I use Malwarebytes Anti-Ransomware beta and though have had two false positives, I feel if I ever do something stupid, it gives me enough extra margin of protection to have a comfort margin and if I ever was important enough to become target of an APT, sooner or later I suppose they would get me, but my assets are pretty much a waste of time.

I have a mild understanding the problems of corporate environment IT and am very happy that this is not my headache (for my time in a large corporate environment I became good friends with IT and also thought upper management (at Xerox) were complete horse's asses in many respects, including how they treated these guys).

I want full control.

Funny enough, the icon that I would like to blow away is the regular Malwarebytes desktop icon, and when I have a moment I will re-logon with the built in Admin account to get at it.

Well, that may in fact be your problem. When you disable UAC, or enable and disable it at various times, different objects are created with different permissions, and you can basically end up with an unmanageable mess of ACL's assigned to things, with varying degrees of accessibility.

You should pick one or the other. Either run without UAC from the start, or always use UAC, don't do some of one and some of the other.

@Mystere: I apologize if I worded my post in a confusing manner; sometimes what I think I am saying, no matter how many times I preview and read through the post, has items of "presumption" in it.

The only time I EVER have UAC on is when W10 has updated itself and turned it on "for me". It seems to like to do that...