Windows 10: Administrator Account Dumbed Down in Win10

Starting to find that the built-in Administrator account is a bit crippled - "This app can't open ... can't be opened using the Built-in Administrator account. Sign in with a different account and try again."

(I always log in with the built-in Administrator account so this could be a deal killer for me.)

Also can't delete some apps from start menus (even as Admin) such as:
> OnDrive
> Store
> Camera
> Documents

THESE are indeed deal breakers. As Admin I haven't found how to delete Store and OneDrive from Guest accounts. Tried to edit the reg but so far I haven't hit the right combinations to rib the guest account of these security issues.

Ideas how to remove Store and OneDrive?

Regards,


:)

 

Dumbing Down a 6300

What I did with my 6233 was to create my own "black" wallpaper. I used Paint to make a 240x320 pixel JPG file and colored it black. I uploaded this image using a cable and set it as my wallpaper. Of course, I also changed the standby font color to another
shade to contrast with my wallpaper.

You could also search the net for compatible dark-colored Themes for your phone if you like. =)

 

Dumbing Down Windows

WARNING!

Yesterday I bravely risked wading into the waters of Windows 10 knowing there were some sharks swimming around. Unfortunately, my toes were bitten off by crabs before I got ankle deep.



The fact that it was free should have been my first clue. If I rated this product as a beta version I would be overly generous.
The issues are too numerous to list but just a few….

• There is so much personal information that one must provide that you essentially abdicate all privacy. The new browser, Edge and the new search engine, Cortana are fully integrated into Windows 10 and use this data to HELP you find things easier when
  it works. And perhaps make it easier for others to find you!
• The menu bar has disappeared from the browser. MS says, "Well this is just the first edition. We're still working on it."
• When I tried to use the multi-task feature it wiped out my Sticky Notes app.
• When getting a hit while using the new search box I was taken directly to an Edge display which immediately disappeared.
• Instability of the product as a whole is very aggravating.

Suggest waiting for the new product to age before installing it. Maybe v 10.3 will be seasoned enough to go with it.
I really feel that Microsoft is dumbing down Windows and catering to tablets, phones and remotes in general only to sacrifice the tools and features we have come to rely on with our PCs.



It is being offered free right now so if you have a high frustration threshold I say give it a try.
There is an option that will allow you to drop back to 8.1 if it doesn't work out.
Getting back is reasonably painless and can be kicked off by visiting Recovery. It's good to be back.

-Jim

 

The built in Administrator account, unlike one you would create yourself, is always elevated with full privileges and unaffected by UAC. By design for security reasons you cannot run Apps with an elevated account. This is not new but goes back to Windows 8.

The Administrator account was never intended for general use. It is recommended that you create and use your own account with admin privileges. This account will be restricted by UAC. Even better would be to create a limited account for regular use but many people find this too inconvenient.

Security is compromised when you run with full time elevated privileges. By default all applications you run will inherit your rights and privileges. This is convenient. The problem arises when you accidentally run malicious code. Even the very best AV product with the latest definitions will not always protect you from this. That malicious code will have all of your elevated rights and be able to do anything it wants. When using a limited account or an admin account protected by UAC those rights will be limited and that malicious code will be much limited in what it can do. Malware can evade such protection but it offer an additional level of protection. And in the battle with malware you need all the advantages you can get.

 

I love the "...way back to Windows 8." *Roflmao2*Roflmao2*Roflmao2*Roflmao2
(I go way back to Windows 2.0 and I don't mean the binary of Windows 10.)

I hated 8 - so never got to find this issue.

I'll not get into a scrap over the Admin account - I'll accept that you mean well and are not trolling.

Regards,

 

What is your point? You can't run modern apps as built in administrator. That is the design. You could use a normal account which is part of administror group and turn down UAC. Administrator is NOT the same as in XP.

He is not trolling - it is how it works.

 

If you are the Administrator,
using the built-in Administrator account,

have access to secpol.msc,
and you are allowed to make changes,
you are responsible for the changes you make.

run secpol.msc > local policies > Security Options > User Account Control: Admin Approval Mode for the Built-in Administrator Account > Enabled
_________________________________
Also need to check >

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
EnableLUA is set to 1


Sign Out or Reboot

_________________________________
Now, Store Apps a.k.a. the metro can be used using the built-in Administrator Account

I have been running metro apps in Server 2012 using the built-in Administrator Account since its release.


The Store App can be disabled using the group policy editor (gpedit.msc)

run gpedit.msc > Local Computer Policy > Administrative Templates > Windows Components > Store > Turn off the Store application

__________________________________

As Administrator, UAC can be manually adjusted from the action center.

Microsoft OneDrive faq
OneDrive: FAQ - Windows Help
OneDrive enable or disable tutorial -

OneDrive Integration in Windows 8.1 - Enable or Disable


Built-in Administrator Account running metro apps in Windows 10

 

Hi

If you are talking about the Metro style panel on the start menu...

I didn't have to do anything to remove the apps from the start menu.
I just right clicked on them and selected remove from start.

They went away and didn't come back.






If you mean remove them from the All Apps list, then there is an uninstall button.

I uninstalled the Health and Fitness app (I don't have either, I'm 76 LOL) and it went away.

Mike

 

Hello Mike.
On this point, there are some embedded apps that cannot be uninstalled.





If one opens the file location from a protected area,
the shortcuts could be deleted but that would hose the system.

 

This sounds like the stuff we have in Windows 8 too.

There was an app that added a command to the right click drop down that would force it to let you access them.

Maybe we're talking about different things but, when I right click on the Documents folder as you have shown I also have an option "Remove From List".






Mike

 

@ GEWB

LMiller7 is not a troller by any definition one could use.

LMiller7 is highly respected member of this forum and the Seven Forum.
He has helped many with this knowledge and willingness to help others.

LMiller7 post #2 was correct advice.

One doesn't have to take the advice. I'm one that cheats a little on such things.
I won't post how because their are many all over the world that read our post.
I try to keep that in mind when posting.

 

There are four default 'Modern' Apps that you cannot uninstall/remove; 'Store', 'OneDrive', 'Camera' and 'Photos'.
To remove them from all Start Menu lists, you will have to 'hide' them, however, you will not be able to use them or invoke an instance of them in a 'hidden' state, and it may cause some corruption of information and/or content executed by the apps previously.

But, if you haven't used them and don't plan to, you'll need to navigate, (as Administrator), to:
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs"
(Make sure you are showing hidden files, folders and drives in 'Folder Options')
Once there you need to create a new folder, (call it what you wish), then cut and paste the desired shortcuts, of the four, into that folder. (You will have to confirm 4 warnings for each shortcut you move; just click on 'Yes', 'Yes', 'Continue' and 'Yes' again)
Once the shortcuts are in the new folder, select the folder and choose 'Hide selected items' on the Tools Ribbon and click OK on the confirmation dialog.
The results should be immediate.
DO NOT touch any of the other 'Modern/Immersive' shortcuts!

Edit: On a caution note: if you are signed on with an MS account, using OneDrive, you may experience further file corruption!
Use some common sense discretion and create a restore point if you have any reservations.

 

A bit off topic, I did an upgrade from 8.1 to 10 and the built-in Administrator account I was using to adopt authority for shortcuts was disabled. The password remained the same when I enabled it again.

Might be interesting if it was the only account one used though.

 

Why? The implication is that only programs run within the explorer shell are safe.
As it is, the explorer shell is the most vulnerable feature of Windows.

... by Apps, you suggest "metro" ... Metro Apps are, by design, more secure than Win32 programs.

Any system connected to any type of network is at risk.

How is that? Even the built-in Administrator does not have the privileges of the Trusted Installer.
The Administrator Account is not always elevated with full privileges and is affected by UAC.

Yes, but vague. General use by whom and what intention?
I would not suggest using the built-in Administrators Account to get on Twitter.
A typical end user is not normally aware of its existence nor of how to use it.

One should understand that the built-in Administrators Account and the built-in GUEST account are courtesy default accounts created by Microsoft that have features specific to their respective use.

There is an assumption, I think, that the built-in Administrative account is more powerful than a user account with Administrative Privileges.

It is not, the built-in Administrative account is just a defaulted template.

The suggestion here is that "elevated rights" cannot be managed.
As posted, UAC is available to limit exposure of the built-in Administrators Account and is not "elevated" by default.

Looking at the UAC panel screenshot,
how would you characterize "elevated" ? > by "Always Notify" or "Never Notify"

How would that happen? There is no way to stop all malicious code and have a system connected to a network that is usable unless one is a powershell master or runs everything from an elevated prompt without a gui... even so, ...

there is only one way to inhibit all malware and that is to turn the pc off.

There is nothing in the Microsoft Management Console Snap-in Control Files that should be hidden.
If one has Administrative privileges, these services are available.
If not, UAC controls and Management Tools would be unavailable to the user.

Using the MMC is not cheating.

Hiding an available modification that is provided by Microsoft is silly.
The fact is, Microsoft System Console programming is beyond the scope of most users.

So now, the suggestion is, that Bat or scripts, registry edits, choice of control use, customization or personalization, usage that is in compliance with the EULA should be restricted?

Boot to the desktop... oops, (in Windows 10)
no option to boot a desktop non touch pc to the start screen.
What to do, What to do.

 

The picture is actually showing the "Camera" context menu, not the "Documents" one. *Smile