aaron-kelley.net

My little corner of the Internet

Archive for January 5th, 2010

Disable remote UAC in Windows Vista and Windows 7

In earlier versions of Windows, if you had files or folders with NTFS permissions assigned to the “Administrators” group (i.e., “Administrators” are allowed to edit the files but other users are not), they applied to all users in the Administrators group like you would expect.  In Windows Vista and Windows 7 (with UAC enabled), a process must be elevated and be running as a user in the Administrators group to be given these permissions.  This is fine when you’re dealing with stuff on your local machine… when you try to do something with a file that you need administrative permission to do, Windows just prompts you to elevate, and you may get a UAC prompt depending on your system settings.

But if you are dealing with stuff on a different machine, perhaps by Windows file sharing, there’s no way to elevate yourself.  So, if you are trying to access a shared folder that only “Administrators” are allowed to access, even if you are a member of the “Administrators” group, you will not be able to access it.

(more…)