Can't run everything as standard user

[anmac1789]

hi, how do I turn off [administrator] from everything 1.5a 1350a in the above title bar? I have disabled run as administrator from "C:\Program Files\Everything 1.5a\Everything64.exe" properties but every time I start it, it says administrator at the top. I have disabled "Run indexing process as administrator" and "Run as administrator" from General tab. After I do this, I get a dialogue box telling me to restart everything to run as a standard user. When I start everything again, [Administrator] still shows up at the top of the title bar...How do I run as standard user?

[horst.epp]

Without folder indexing you can't run Everything without Admin rights
as NTFS volume indexing needs it.
Normal Solution is to install the service.
With this there is no longer any Admin rights needed for the client.

[anmac1789]

Without folder indexing you can't run Everything without Admin rights
as NTFS volume indexing needs it.
Normal Solution is to install the service.
With this there is no longer any Admin rights needed for the client.

Without folder indexing you can't run Everything without Admin rights

What do you mean by this? is there an option for this?

Normal Solution is to install the service.

Everything service is turned on already...

[therube]

Is your "user account" (anmac1789, or whatever it may be) running "as Admin"?

If so, then when you run Everything (& mostly likely when you run most everything), it will be (they will be) running elevated, "as Admin".

And if that is the case, Everything is (more) simply pointing out that because you are running "as Admin", Everything (& most likely most everything you are running) is running in an elevated manner (even though you did not specifically do anything to cause Everything to run elevated).

[void]

Common causes for Everything running as administrator:

Please make sure Everything is installed correctly and running as a standard user:

• In Everything, from the Tools menu, click Options.
• Click the General tab on the left.
• Check Store settings and data in %APPDATA%\Everything.
• Uncheck Run as administrator.
• Check Everything Service. (Please make sure this is tick-checked and not square-checked)
• Click OK.
• Exit Everything (right click the Everything tray icon and click Exit).
• Restart Everything.

Please make sure Everything is running as a standard user:

• Right click your Everything.exe or a shortcut to Everything
• Click Properties.
• Click the Compatibility tab.
• Uncheck Run this program as an administrator.
• Click OK.

Please make sure Everything is running as a standard user:

• Right click your Everything.exe or a shortcut to Everything
• Click Properties.
• Click the Shortcut tab.
• Click the Advanced button.
• Uncheck Run as administrator.
• Click OK.
• Click OK.

Please make sure Everything is running as a standard user:

• Right click your Everything.exe or a shortcut to Everything
• Click Properties.
• Click the Compatibility tab.
• Click the Change settings for all users button at the bottom.
• Uncheck Run this program as an administrator.
• Click OK.

Check if the program that launched Everything is also running as administrator.
An easy way to do this is with Process Explorer.
Check the integrity of the parent process. (right click the column header and select the Integrity column if it is not shown)
Typically this will be explorer.exe running with Medium integrity.
What is shown for you?

Without folder indexing you can't run Everything without Admin rights

Everything can use NTFS indexing for non-system NTFS volumes without admin privileges.
Most users will want to index their C: drive which is always marked as a system volume.

[anmac1789]

I've done all the above steps and this is the process explorer windows. When I run everything it still shows administrator

Screenshot 2023-06-10 014628.jpg (393.07 KiB) Viewed 8411 times

[void]

Explorer.exe is running Elevated. (shown as high integrity in Process Explorer)

Anything you launch from Explorer.exe will run elevated.

You'll need to figure out why Explorer.exe is starting elevated.
Please check any startup scripts and scheduled tasks.

[anmac1789]

Explorer.exe is running Elevated. (shown as high integrity in Process Explorer)

Anything you launch from Explorer.exe will run elevated.

You'll need to figure out why Explorer.exe is starting elevated.
Please check any startup scripts and scheduled tasks.

How do I know why or what is making explorer.exe run elevated?

[tuska]

Hi,
I suggest considering the following:

Press the Windows logo key + i ...
System > Click on "About" then on "Domain or workgroup" > Confirm the user account control request (UAC) >
Click on "Advanced" tab > User profiles: Settings... > User profiles are shown

For example, these user profiles are displayed for the PC.
 

2023-06-10_User and administrator accounts.png (90.23 KiB) Viewed 8371 times

 
When I press the start button in Windows, "user" is displayed,
if I now click on the "user", then "Administrator" is displayed to me as another account.

The image shows that I have logged on to my PC with my "user" account (no administrative rights).

What does this look like for you?

Do you have more than 1 account?
If you only have 1 account, then it probably runs as a "real administrator account".

In such a case you should create an additional user account - without administrative rights:
Control Panel\User Accounts\User Accounts\Manage Accounts... --> Google can certainly help here more than I.

(However, I am not an expert...)

[void]

Administrator accounts should still run as Medium integrity.

Are you using the true "administrator" account?
-The true "administrator" account will run with High integrity.

[anmac1789]

Hello this is what I see in my user profiles settings

Screenshot 2023-06-12 015834.jpg (57.13 KiB) Viewed 8315 times

I'm using windows 10 and when I click start this is what I see

Screenshot 2023-06-12 020025.jpg (69.51 KiB) Viewed 8315 times

[NotNull]

I suspect your Windows account itself causes all programs -- including Explorer and Everything -- to be run with high privileges

To check:

• Start Command Prompt ( CMD.exe )
• Type or paste the following command and press ENTER:
  
  whoami.exe /groups
• Find the Mandatory Label/... group name
• Find the SID for that entry
• The SID can be any of the following:
  • S-1-16-4096 ( = Low)
  • S-1-16-8192 ( = Medium)
  • S-1-16-12288 ( = High)
  • S-1-16-16384 ( = System)
• Report back the SID for your user account
• If not Medium or Low, you need to create a new useraccount with less privileges for daily operation [1]

To create a new usraccount:

• Press 'Win + R' to activate the Run dialog
• Type
  lusrmgr.msc
• Press 'Ctrl + Shift + ENTER' to start this program elevated
  Local Users and Groups will open
• Right-click Users
• Select New User from the context menu
• (fill in the settings the way you want it)
• Press the Create button
• Press the Close button

To test:

• Log off
• Log in with the newly created user account
• Run whoami /groups for this user
• Report back the current SID
• Done.

SID for 3 different user accounts:

2023-06-12 11_50_29-.png (119.91 KiB) Viewed 8302 times

[1] "Need" is a bit too strong here, but it is highly recommended

[therube]

When I posted, I was going to say that even if you are running "as Admin", Windows Explorer (typically) still runs with Medium integrity.

And it sure looks like having Windows Explorer (explorer.exe) running as "High" is highly unusual.


(It was said, that in Win8 disabling UAC causes explorer.exe to run as High.)


Maybe, How to Restart Explorer.exe Cleanly in Windows 10 or 11?


I like the create a new User account idea, logging into it, & seeing how that runs (at which integrity level).


(Oh, & it also appears that Chrome runs at an Untrusted level - though, you do have some aspects [of it] running at High [not good, I'd think] where ordinarily [I'd think] those particular parts would be running at Medium.

The only thing I have, that I am aware of [Win7] that runs Untrusted is Sandboxie.)


You might even reboot your computer into Safe Mode, log into your current account, & see if you're still High?

[anmac1789]

I had a similar problem before where i disabled run as admin in everything options then void suggested that i uncheck run as admin in the everything.exe properties dialog box when i unchecked then it worked but that was a few months ago. I dont understand why this time unchecking and disabling run as admin still runs everything as admin ?

Screenshot 2023-06-12 180504.jpg (160.41 KiB) Viewed 8275 times

When I uncheck run as admin in everything options it says everything will be restarted but a new everything window does not open

[therube]

Because "Windows", your user account (itself, explorer.exe) is running High.
So everything spawned from "you" is then also running High.

You have to figure out why you are running High (which I expect is highly irregular).


(Language warning, if you're into that, but it's funny, well, funny to me)
Because I Got High.


Your issue has nothing to do with Everything, but it is affecting everything (& Everything, too).
(And it is not right.)

[NotNull]

Exactly!

If not Medium or Low, you need to create a new useraccount with less privileges for daily operation

[anmac1789]

How the heck …. i dont know when my windows was running in high mode .. it was mot known to me should i re rnable UAC ?

[void]

Can't hurt to try.

From my tests on Windows 10, disabling UAC prompts will still run explorer with medium integrity.

[NotNull]

Will probably depend on the Windows version. Win7 behaves different from Win10. Not sure about user integrity level though.

[froggie]

Tested on Windows 7. Turning UAC off will run standard Admin user as High, turning UAC back on runs same user as Medium.

[anmac1789]

yes i just tested the same thing, enabling UAC back to recommended restored everything to run without administrator. Im not sure if other programs might be affected. Im using windows 10 x64 enterprise

[Daveargecy]

I too always end up back as Administrator. I've tried many suggestions to no avail

Also having issues with the search results not showing matching content. I've rebuilt the indexes, checked every option for correct setting etc, still no love.

[NotNull]

Please tell us what you already tried, so we can fill in the missing pieces.

BTW:
What version of Everything?
What mandatory level is your user account running? (see above)

[Daveargecy]

Using 1.5
Tried almost all the suggestions in the forum.

I don't really care if I am administrator or not, just want full function as if I were a regular user.

I have had lots of trouble getting the contents to be indexed and I am abou 70% though that reindexing, so hopefully this is resolved.

Couple other questions:
It sure sucks down a lot of memory... any way to have that just saved on the drive? I know it wont be as fast, but it would still, presumably, be faster that Win Explorer.

Where do I find details, examples, tutorials, etc on using the http server?

[void]

Your content index is stored in memory.
Content indexing will use a lot of RAM.

Please exclude as many files as possible with your content exclude filters.
Everything is only designed to index about 1GB of text content.

To check your content index size:

• In Everything 1.5, from the Tools menu, under the Debug submenu, click Statistics.
• The total content index size is shown under: File data size