Over-ride Administrative Policy
Posted by admin on Mar 3rd, 2007
I have Windows Vista Premium and am working on a SINGLE machine. When I try to install certain programs (Itunes 7.1 and Windows Mobile Device Center 6 for Windows Vista), I get an error message:"The system administrator has set policies to prevent this installation". Yet: I am the system administrator and there's no option to enter password to give permission.Suggestions?
Mar 5th, 2007 at 10:32 pm
In Vista, even an administrator account runs with standard user privileges until a program asks for administrator elevation. The programs you are installing have not been updated for Vista.You can force the issue by right clicking the installation file and selecting the Run as Administrator option in the context menu. Ronnie Vernon Microsoft MVP Windows Shell/User "Harry Motro" <Harry Motro@discussions.microsoft.com>
Mar 9th, 2007 at 10:16 pm
I have had the same exact problem with the new itunes 7.1.1 and 'run as admin' does not help. I have tried too many things to list with no avail. Can anyone help?"Harry Motro" wrote:
Mar 12th, 2007 at 04:34 am
If anyone is interested I found out that in windows home premium, secpol.msc, is not available, therefore you have to go through the command prompt to open the 'real' administrator account. Once I did this my 2 week problem was solved."jaxsen" wrote:
Mar 16th, 2007 at 10:35 am
Yes, well, my issue is with Powerdvd. It won't let me install v 7.03, because it says I don't have administrative permission on my computer. I changed the settings, i think, like previously suggested, but now it won't go further than entering my password. Once I enter the password, it won't let me go any further, just gives that same error. I would rightclick the option to enter the password, but when I do so, right clicking shows no options. So, how can I change my settings or whatever to enable the usage of powerdvd?
Mar 21st, 2007 at 10:05 pm
YOU BET I'M (among a multitude) INTERESTED.Jaxsen, your message very enticing and equally unenlightening! For those of us less experienced, please advice precise path after the (black) screen appears with all the mumbojombo. What then?Thank you. Cordially,"jaxsen" wrote:
Mar 24th, 2007 at 08:48 am
RODuke41You replied to a very old thread that did not contain a lot of information.What exactly is the problem you are experiencing and what would you like to accomplish? Ronnie Vernon Microsoft MVP Windows Shell/User "RODuke41"
Mar 26th, 2007 at 05:18 pm
Thank you, Vernon. Prompt reply appreciated.What I am trying to accomplish is where/how/when Administrator (that's me) policies were set and equally, how/where to change them.As you know, there's a multitude of group members experiencing the same problem over an extended period. All sorts of responses, but not one answers the question. Put aside UAC off/on, a workaround sometimes but not always helpful,and dangerous to boot.Cordially, RO "Ronnie Vernon MVP" wrote:
Mar 27th, 2007 at 08:17 pm
RO If you are using Vista Business, Enterprise or Ultimate, the policies that control the UAC prompt that you see when a program asks for system wide, unrestricted access, are set in either the Group Policy Editor or Security Policy Editor. If you are using the Vista Home Basic or Home Premium, they are set in the registry. There are only a couple of ways to override administrative policies. One is to turn UAC off, which you have already noted can be dangerous and the other is to use the builtin administrator account, which has the administrator elevation prompt disabled. Using this account can be as dangerous as disabling UAC, since it has the ability to allow any program to gain unrestricted access to the entire system with no prompt as to what is happening.Another disadvantage to using the builtin administrator account is that changes made to the system may only be applied to settings when you are logged on with that account.You can enable the builtin administrator account by going to Start and typing cmd.exe In the results, right click cmd.exe and select the Run As Administrator option.In the command window, type the following command:net user administrator /active:yesPress Enter.This will make the builtin admin account visible on the login screen. Ronnie Vernon Microsoft MVP Windows Shell/User "RODuke41"
Mar 30th, 2007 at 07:36 am
I am much obliged Ronnie Vernon although your reply is a good illustration of the expression, you've forgotten more than I'll ever know.You say the Admin policies for Vista HP are set in the Registry. That effectively puts them well beyond me as even the word Registry makes me apprehensive. I now understand why no info is supplied when the dreaded block appears.You helpfully continue with alternatives to override admin policies, each of which is dangerous, any one more so than another. Your conclusion re making the builtin admin account visible on the login screen makes me wonder whether it's worthwhile to do so. A case of the cure being worse than the bite, so to speak.It is disappointing to realize the repetitive blocking of all sorts of program installation (including even some from msn!) is insoluble. Process then requires going to where UAC can be turned off, then back to the program, then after install, back again to turn on UAC. Almost worth turning off Vista.Cordially, ROPS: In your opinion are the MSN programers likely to come up with a modification allowing onthespot Admin change to ALLOW an installation to proceed? And I mean in the near future; at my age long term planning is six months. RO "Ronnie Vernon MVP" wrote: