User Account Control (hereinafter referred to as "UAC") affects the execution of a process or program that requires administrator privileges to enhance the security of Microsoft Windows Server.
The following describes the difference when UAC is enabled to when it is disabled.
When UAC is enabled
When any user other than the Administrator account (including accounts in the Administrators group) executes a process or program that requires administrator privileges, the "Permissions granted/authorized dialog" is displayed. Permissions granted or authorized must be confirmed.
When UAC is disabled
A process or program that requires administrator privileges must be executed by either an Administrator account or a user account in the Administrators group.
Operating requirements are described below.
Account Type | UAC: Enabled | UAC: Disabled |
|---|---|---|
Administrator account | Y | Y |
User account in the Administrators group | N (*1) | Y |
Standard user account | N (*1) | N |
Y: A process or program runs without displaying the permissions granted/authorized dialog.
N: A process or program does not run because the user does not have administrator privileges.
*1: The permissions granted/authorized dialog is displayed and the process or program runs if the user is authorized. However, the message output by the process or program is not displayed.
When UAC is enabled and a process or program is executed by any user other than the Administrator account, use one of the methods below to execute that process or program with administrator privileges:
Disabling Interactive Processes | User Account in the Administrators Group | Standard User Account |
|---|---|---|
Specify "Command Prompt (Admin)" to run the Command Prompt. Execute the program from the Command Prompt. | Can Disable | Can Disable |
In the task scheduler, start the process with "Execute with maximum permissions" specified. | Can Disable | Cannot Disable |
