31

In Windows 7 I created two users: a regular user that I log in as and an administrative user that I enter the password for whenever I did anything that required elevation. This seems to work well enough in the past, the Control Panel prompted me with a UAC prompt every time I changed system-wide settings.

Now after I upgraded to Windows 10 the Settings app seems to gray out most options that are not changeable by regular users. (e.g. uninstall apps, Windows Defender real-time protection, wifi metered connection status, etc). Is there a way of running the entire Settings app as Administrator so I can use it to change the settings without going to the trouble of switching users and starting a new session as Administrator? I tried right clicking on the app icon in the start screen but it did not display the "run as Administrator" option.

2 Answers 2

11

Why it's happening

This isn't the problem of not running the Settings app as an Administrator. Those settings are controlled by Group Policy.

It appears by default regular users cannot change these settings (it does make sense).

I actually tried running the app as an Administrator from an elevated command prompt, Windows Powershell (Start-Process "ms-settings" -runas /user:Administrator), and also by right clicking and choosing "Run as Admin" on the actual SystemSettings application located at C:\Windows\ImmersiveControlPanel. Nothing worked

The answer to your question is basically because you're on a normal user account.


How to change group policy for non-administrators

So if you do want normal users to be able to access the greyed out settings I recommend you follow the following tutorial:

Local Group Policies - Apply to All Users Except Administrators

Yes, it says Windows 7 but most likely this will work for Windows 10. Here's a summary:

1. Open the Start Menu, type mmc.exe in the search box, and press Enter. NOTE: In Windows 8, you could press Windows+R keys to open the Run dialog, then type mmc.exe, and click/tap on OK instead.

2. If prompted by UAC, then click on Yes (Windows 7/8/10) or Continue (Vista).

3. In the MMC Console window, click on File (Menu bar) and Add/Remove Snap-in.

4. In the left pane, select Group Policy Object Editor, and click on the Add button.

5. Click on the Browse button.

6. Click on the Users tab, select an Non-Administrators, and click on OK.

7. Click on the Finish button.

8. Click on OK.

9. In the MMC Console window, click on File (Menu bar) and Save As.

10. Select to save to your Desktop, type in a name (ex: Non-Administrators-Group-Policy) that you would like to have for this "all users except administrators" group policy MSC file, then click on the Save button. NOTE: You can use any name you like, but it would make it easier for you to know what user (ex: Test) or group this "specific" group policy MMC console was for later if you included the user or group name.

11. Move the MSC file (ex: Non-Administrators-Group-Policy.msc) to where you would to keep it saved at. NOTE: You can also Pin to Taskbar or Pin to Start Menu this MSC file.

12. Whenever you open this MSC file (ex: Non-Administrators-Group-Policy.msc), it will only apply group policies to all users except administrators.

5
  • 3
    So what you are saying is: 1) it is impossible to run settings app as an admin in the same desktop as a current user (e.g. using runas) and 2) it is possible to use Local Group Policy to enable limited users to change the grayed out settings? I can't edit policy on this PC as it is home edition, but I will keep that in mind. Thank you!
    – lmz
    Sep 27, 2015 at 2:39
  • You're welcome and sorry I totally forgot about the home edition thing. Glad it helped
    – Insane
    Sep 27, 2015 at 2:42
  • 1
    Those settings are not controlled by Group Policy, but may be overridden by Group Policy. The question is still valid, even though Group Policy may be used as a workaround.
    – Simen
    Sep 6, 2016 at 20:31
  • 1
    This doesn't work for Windows 10 Mar 23, 2020 at 15:30
  • Ok, I went through the steps to create the MSC file. It displays the policies for non-admins. Now what policy do I need to change in order to make that working? For instance, I want to use the cogwheel (settings) to enable remote desktop - but it is greyed out and I cannot run it as administrator (I have only elevated rights on the PC). Which steps are missing?
    – Matt
    Dec 8, 2021 at 7:37
-2

way 1

log them off log in with a admin account do what you need to do

way 2

if they have vpn established to your network, logging them off breaks the vpn connection. tsdiscon also seems to break vpn at point of logging in. so try from your console:

PsExec \computernameorIPaddress -u Domain\username \path to program

way 3 or well connected you can try from their cmd "runas /user:DOMAIN\USERNAME appwiz.cpl" enter DOMAIN connecting to\your user name in DOMAIN\USERNAME part. appwiz.cpl opens the add remote software program, but from there you can press the back arrow to get to control panel home, theoretically as admin as long as their isn't a GP blocking it.

1
  • 4
    UWP applications cannot have their permissions elevated. Running a UWP as an Administrator doesn’t increase the permissions of the process (it literally does nothing)
    – Ramhound
    Dec 26, 2019 at 5:00

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .