Vista disabled administrator and UAC
-
I read somewhere (can't remember where) that initially, the "True" administrator account is disabled in Vista and the first account that gets created is only part of the administrators group, runs with two tokens, and tries to use the user token first unless something indicates elevation is desired. UAC is supposed to effect the "administrators" group in general. Apparently, the disabled "Administrator" account was special in that if you enabled it and logged on as it, UAC would not effect the account and the administrator would run with only one administrative token. Sounds too good to be true but I figured what the heck and gave it a try. This appears not to be true as the "Administrator" account is still affected by UAC on my Vista Business box. Has anyone read about this and if so, what is special about the disabled administrator account and how do I summon it's magical powers.
-
I read somewhere (can't remember where) that initially, the "True" administrator account is disabled in Vista and the first account that gets created is only part of the administrators group, runs with two tokens, and tries to use the user token first unless something indicates elevation is desired. UAC is supposed to effect the "administrators" group in general. Apparently, the disabled "Administrator" account was special in that if you enabled it and logged on as it, UAC would not effect the account and the administrator would run with only one administrative token. Sounds too good to be true but I figured what the heck and gave it a try. This appears not to be true as the "Administrator" account is still affected by UAC on my Vista Business box. Has anyone read about this and if so, what is special about the disabled administrator account and how do I summon it's magical powers.
-