Forum Discussion
UAC blocking Microsoft Management Console [mmc.exe]
This is by design. Being in the "Administrators" group is not the same as being THE Administrator. When you "run as Administrator" you are elevating to Ring 0, which has access to privileged areas of the OS. This is a security measure to prevent accidental access. Here's an [old but correct] article that should help. https://blogs.technet.microsoft.com/mrsnrub/2010/08/06/user-account-control-but-im-an-admin/
-Eddie
So what you are saying is that I shouldn't be able to access device manager, disk management, local security policy, etc. Just to clarify, I can access these through command prompt and it has only started blocking me recently
First, what build is this on? Just want to verify 🙂
Second, is this device managed by an IT department, or is it just a personal device?
I want to make sure I clearly understand your scenario.
1. You are logged in with a user that is a member of the local administrators group.
2. You are attempting to run various admin tools (mmc, Device Manager, etc.) from the Start Menu.
3. In doing so you are blocked by UAC.
4. You open an elevated command prompt ("run as administrator")
5. You can now open the admin tools from the elevated command prompt.
If this is your scenario, then that is correct and by design. You mentioned this changed. This is why I'm asking if your device is managed or not. If it is, then someone may have previously disabled UAC and it has either been reset, or intentionally turned on.
If this is an Insider build and is not managed AND you had previously disabled UAC and it was reverted to default, please file feedback and share the link so we can look into it.
-Eddie