I am admin on win 7, why still need to “run as admin” [closed]

Question

Possible Duplicate:
Why do I need to run commands as administrator if my account is member of administrator group?
Windows 7 “Run as Administrator” when already an Administrator

I was researching on internet but didn't find anything except "User Access Control". Here is the senario, I have all administrator rights on my login name. when I go and see policies it says I am administrator. but when I am registering dll with regsvr32. it give me error to be as admin. when I run the batch file as admin , it run successfully and register the component. I am confused when I have all rights as administrator. Why again I need to run it "as Admin"

Answer 1

That's what UAC does.

It strips admin privileges from normally-launched processes.
This encourages you to not use dangerous admin powers where you don't need to.

Answer 2

Read through this thread: http://forums.atomicmpc.com.au/lofiversion/index.php?t45049.html

As SLaks said, this is the purpose of UAC.

Answer 3

It is a basic, and very important, concept in computer security that a superuser or administrator not run routine tasks with permissions those tasks do not need. Windows implements this basic principle in a slightly different way from UNIX.

On UNIX machines, administrative users have access to two or more accounts. One of those accounts has superuser privileges, typically the root account, and the others don't. You usually only have one true administrative account, shared by all administrators.

Windows does this differently. Administrators usually have only a single account that holds all their privileges. But tasks don't run with with administrative privileges unless the administrator specifically asks them to.

You can think of "run as administrator" as the UNIX equivalent of "run as root" -- it means to give the task the privileges that I have the right to give it, but that wouldn't want ordinary operations having.

Conceptually, the Windows implementation is more logical. But in the actual, practical application, it doesn't seem to work quite as well as the simpler UNIX approach.