Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Windows 8 installed, joined the computer to our domain and logged in as the domain administrator.

Any time I try to open an app from the Metro UI I get the following message:

This app can't open
[App name] Can't be opened using the Built-in Administrator account.
Sign in with a different account and try again.

If I try to run IE from the Metro menu I get that message but if I switch to desktop mode, I'm able to open IE.

Very strange, not sure if this is expected behavior or a bug.

share|improve this question

I agree Tom. Since the beginning of operating systems, there has ALWAYS been a root or admin account that could do EVERYTHING.

From what I have read, it seems that this was added to the OS for auditing, data leakage, retention and compliance. In other words, they have killed the built in admin accounts (local and domain admin) ability to run apps because apps can access data using "split tokens." The user access control is turned on for these accounts so that they are limited in what they can reach, especially data, and everywhere they go, they leave a trail.

It looks like the idea is that you have the built in domain admin account and then a separate user account that is part of the domain admin organizational unit.

It flies in the face of all previous design, but the mar

share|improve this answer

The admin account is locked for admin control in windows 8. So, those functions which are normally within the remit of an admin are still available, but those functions which are in the remit of a lessor user are locked out. At the moment metro functions are lessor user so locked out from admin use. I haven't found the logical way to apportion functions to user type yet (I'm sure its there somewhere though?).

share|improve this answer
Yeah, I don't get it. The domain admin or computer admin should be able to run whatever they want. – Tom Mar 1 '12 at 21:23

You must log in to answer this question.

protected by Community Nov 29 '12 at 23:50

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged .