Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are a few questions that are similar here, but I'm inspired to dig a little more deeply into the internals of how applications check for administrative privileges and how they can be affected by the properties of the logged in user.

The problem:

I have a Canon network printer driver ( that refuses to install the network printer drivers if run from a domain user account, even if it's in the local Administrators group.

The error returned by the installer when running under the domain account in the local Administrators group is that it is not running with administrator privileges. If I log out and back in as a local user in the Administrators group, then the installer works.

The Question:

Is there an issue in the way the program checks for admin privileges? Are there any key differences in privileges for domain users in the Administrators group vs. local users in the Administrators group?

I have taken process monitor logs of both the failed install and the successful install. Normally I would think that the process would use CheckTokenMembership to see if it is in the administrators group. Is this something that can easily be checked in Process Monitor?

share|improve this question
I don't know if Process Monitor can check it easily but I have had good luck with API Monitor (It is in alpha but it works good, the dev also follows the forms fairly closely, you can get an answer from him within a day or so of posting if you need a custom XML definition file for a API the program does not yet know how to track, all of the windows API's have been in there for a while) – Scott Chamberlain Feb 19 '13 at 0:04
Just because your the local user profile is contaned within the Administrators doesn't mean you are an Administrator on the domain. There is a huge difference. This sounds like a domain configuration problem dealing with configurations. – Ramhound Feb 19 '13 at 13:09
I shouldn't need domain admin permissions to make a change to my local computer with local admin rights. I forwarded this question on to Canon support but have not received a response in months. – ShutterBC Jul 19 '13 at 15:27

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.