If a user is logged on to Windows Vista and if User Account Control is enabled, a program that uses the user’s filtered access token and a program that uses the user’s full administrator access token can run at the same time. Applications can use the full administrator access token if the administrator user clicks Allow in a User Account Control dialog box. This filtered access token is used to start the user’s desktop. If LSA is notified that the user is a member of the Administrators group, LSA creates the second logon that has the administrator rights removed (filtered). ![]() When an administrator logs on to Windows Vista, the Local Security Authority (LSA) creates two access tokens. But the real fix is given in KB3035277 (also mentioned below) instead. ![]() Microsoft Knowledgebase article KB937624 After you turn on UAC, programs may be unable to access some network locations addresses this issue. However, those workarounds are not necessary as there is a permanent registry-based solution that lets you use mapped drives from standard as well as elevated processes. Also, they advise users to disable Run with highest privileges for that specific scheduled task job to be able to use the mapped network drive. Various forums suggest that people use UNC paths (as a workaround) instead of mapped drive letters when in elevated Command Prompt mode or running batch files with Task Scheduler. ![]() However, the mapped network drive is accessible from File Explorer and regular (non-elevated) Command Prompt. Here are the screenshots from a computer running Windows 10 version 1903.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |