How do I run an application once with a full administrator access token?

Applies To: Windows Server 2008 R2

Some legitimate applications require a full administrator access token to perform their functions or tasks. The User Account Control (UAC) message is displayed to request consent or credentials to allow an application to use the full administrator access token in any of the following circumstances:

  • The application developer marked the application to require an administrator access token. This is done by using a development technique known as an embedded manifest.

  • UAC detected that the application is an installer or setup application. (Automatic detection can be disabled by using Group Policy.)

  • Microsoft analyzed the application and provided an application compatibility shim. A shim is a small amount of extra code provided by Microsoft that supports certain non-Microsoft applications.

  • An administrator configured the application compatibility settings on the application's Program Properties page.

  • An interactive user right-clicked the application and then clicked Run as administrator to start the application.

All of these settings except Run as administrator apply every time the application is started. To occasionally run an application with a full administrator access token, use the following procedure.

To perform this procedure, you must be logged on as a local administrator or provide the credentials of a member of the local Administrators group.

To run an application one time with a full administrator access token

  1. Locate the program icon or a shortcut in Windows Explorer.

  2. Right-click the program icon or shortcut, and then click Run as administrator.

  3. When the UAC message is displayed, do one of the following:

    • If you are logged on as a standard user, or if UAC is configured to always require credentials, enter the appropriate administrative credentials, and then click OK.

    • If you are logged on as an administrator and UAC is not configured to always require credentials, click Yes to start the application.