Hi I have a Windows 2008 R2 Domain and several Windows 7 clients joined to the domain. This is the first strange behavior: When I stay in front of the machine, there are some actions to do with elevate privilegies, so I select the application, rigth click and select "Run as administrator", and run, that's the problem, I think that it must show me a window to capture the admin and password. This is a concern, because, in this way, the users can use elevated privilegies to run something. What can I modify in the domain or do in a GPO for running as administrator and ask the user/password? This is the seconf strange behavior: In the same clients, I need to run an ipconfig or some other dos command, if I did it only using a CMD, appear the command prompt, I write ipconfig -all; and after the enter, the command prompt window never gets back an answer, it looks freeze, so I have to open the command prompt with "Run as administrator" and in that way is the only when return information, why is this problem? Thanks in advance!Doc MX

If you are logged in as a user with local admin rights and right click run as administrator it will not prompt you. If you are not in the local administrator group it will prompt you. As for your problem with cmd and ipconfig /all i do not know I just tested as a user with no local admin rights and it still returned all information. I know in windows 7 you are just better off right clicking and running as the administrator it saves a lot of head aches when trying to do advanced tasks. If you are just running simple things copying moving files via cmd then do not run as administrator.

That's the point, I done it logged as normal user.... and never ask me the credentials for the local or domain admin. As you said, for an ipconfig (in my example) must not have problems, but the reality is that.... don't work :( any idea where to dig? or obtain more information?Doc MX

Hi, Please use whoami /all command by run command prompt as administrator and double click it directly also. Then compare the results please. Kim Zhou TechNet Community Support

Hi, Please use whoami /all command by run command prompt as administrator and double click it directly also. Then compare the results please. Kim Zhou TechNet Community Support

Hello, here's some things you can check: 1. Look in ADUC and make sure the user in not part of the domain admins or other priviledged admin groups. 2.Look in the local PC's users control userpasswords2 and look in the administrators group and make sure that the user in not in that group 3. Check that the user is not logging in to his local machine where he may have local admin priviledges. Miguel Fra | Falcon IT Services, Miami, FL www.falconitservices.com | www.falconits.com | Blog