Windows 10: GPO to Run a specific application in the domin as administrator for a standard user account.

Hi All, We a have an application in our environment. it's been used by few users in different machines. The application needs administrator privileges to run. Temporarily I have created a service account and added it to the local administrator group. As the service account has elevated permission and due to security concerns company has decided to provide administrator access only to the specific application. I have been searching all these times to create GPO and apply it to the specific computers but nothing worked. Unfortunately I did not find one in the internet. I created GPO's and test

:)

 

Is there still reason to use standard user account in Windows OS?

Hi all!

Suppose I'm the only user of the computer. Suppose I have User Account Control activated. Is there or are there still reasons to create and use standard user account for everyday work? As far as I understand, with User Account Control active I have the permissions of a standard user even if I'm logged on as an administrator. If I use administrator account for everyday work does User Account Control give me EXACTLY the same level of protection from viruses and malware and from making accidental system-wide changes as standard user account with active UAC? I don't imply that UAC protects me from viruses and malware. I use proper antivirus software for that.

In other words, do I get the same level of protection when I use administrator account with UAC enabled and when I use standard account with UAC enabled? Is it true that UAC turns an administrator account into what is know as a protected administrator account, basically, an administrator account that runs with standard user account privileges? Or does standard user account with UAC enabled gives me yet higher level of protection over administrator account with UAC enabled?

 

Is there still reason to use standard user account in Windows OS?

Thanks to all for taking the trouble to share your opinion. I personally have always had two accounts on my computer – administrator for administrator actions and standard for everyday use. The reason I'm asking is that some legitimate modern programs still require administrative permissions to run them in standard user. I suspect that some legitimate modern programs are unable to install updates in standard user even with administrative permissions. And some programs have limited functionality in standard user account. Last but not least, it's an extra work to set up and administer two accounts for one user of the computer and it takes up more space (relevant for SSD). This is all quite annoying.

As I’m the only user of my computer my only concern is adequate virus protection. I'm well aware of all the everyday hazard associated with using the computer in this day and age. I know how to use and properly configure antivirus software and firewall. So what I’m trying to find an answer to is whether or not UAC turns an administrator account into what is known as a protected administrator account, basically, an administrator account that runs with standard user account privileges. And if not, how much of a benefit for me to use standard user account for everyday work considering that I frequently have to deal with some of my programs constantly requiring administrative permissions to run and some are unable to install updates even with elevated permissions [in standard account].

 

Standard user account created shows Administrator on Windows 10

Hello,



Thank you for posting on Microsoft Community. We regret the inconvenience caused and will assist you in resolving the issue.



Before assisting further, I would like to ask you few questions:

• Are you logging in using a Microsoft account on any of the created two user accounts?
• Have you created 2 local account with administrative privileges on the computer?

Please be informed that Local user account as well as
Microsoft user account can be considered as Standard user account. A
Standard user account is the user account which do not have any administrative privileges.



It is possible to create two or more accounts with administrative privileges on computers running with Windows 10 operating system.



If you want to convert one of the user account as a standard account, I suggest you to follow the steps below and check if the issue is resolved.

• Press Windows logo key on the keyboard, type Control panel in the search box and select the top most search result.
• Select User Accounts and click on Change account type
  from the window.
• Click on the user account and select Change the Account type option.
• Select Standard and click on Change account type
  button from the window.
• Close the window and check if the changes are effective.

Write to us with the answers to the above questions and the status of the issue on the same post for further assistance. Your reply is most important for us to ensure we assist you accordingly.



Thank you.