The Experience Blog » User Account Control

More UAC stuff making confusion in Windows 7

Andreas Stenhall — Tue, 01 Mar 2011 06:07:59 +0000

I get many questions about the confusing problem with mapped network connections not being available when running for instance cmd.exe as an administrator even though the account is the same one being used when the cmd.exe is run with standard rights and everything works splendid.

The cause of this is UAC and the fact that you have multiple security tokens and that the mapped network drives are linked to the standard user token and not the administrator token. The solution is to enable “Linked Connections”, see the KB article 937624 for more information on how to set this value.

Also read the case of some other mysterious problems or behaviors when UAC is en effect.

UAC off = IE protected mode off

Andreas Stenhall — Fri, 05 Feb 2010 06:38:31 +0000

Just wanted to post a quick reminder that if you turn off UAC (User Account Control) in Windows Vista or Windows 7 you also turn off “Protected mode” in Internet Explorer. Turning off UAC is not recommended but if you do, make sure that you run with a standard user account.

Turn off UAC in a domain using Group Policies

Andreas Stenhall — Sat, 29 Mar 2008 23:03:20 +0000

Some people for whatever reason want to turn off UAC for all or certain computers in a domain using Group Policies. This is done by setting the Computers Configuration > Windows Settings > Local Policies > Security Options > User Account Control: Run all administrators in Admin Approval Mode to disabled. As usual when turning off UAC a reboot is required for the changes to take effect.