Can't run everything as standard user

[anmac1789]

hi, how do I turn off [administrator] from everything 1.5a 1350a in the above title bar? I have disabled run as administrator from "C:\Program Files\Everything 1.5a\Everything64.exe" properties but every time I start it, it says administrator at the top. I have disabled "Run indexing process as administrator" and "Run as administrator" from General tab. After I do this, I get a dialogue box telling me to restart everything to run as a standard user. When I start everything again, [Administrator] still shows up at the top of the title bar...How do I run as standard user?

[horst.epp]

Without folder indexing you can't run Everything without Admin rights
as NTFS volume indexing needs it.
Normal Solution is to install the service.
With this there is no longer any Admin rights needed for the client.

[anmac1789]

Without folder indexing you can't run Everything without Admin rights
as NTFS volume indexing needs it.
Normal Solution is to install the service.
With this there is no longer any Admin rights needed for the client.

Without folder indexing you can't run Everything without Admin rights

What do you mean by this? is there an option for this?

Normal Solution is to install the service.

Everything service is turned on already...

[therube]

Is your "user account" (anmac1789, or whatever it may be) running "as Admin"?

If so, then when you run Everything (& mostly likely when you run most everything), it will be (they will be) running elevated, "as Admin".

And if that is the case, Everything is (more) simply pointing out that because you are running "as Admin", Everything (& most likely most everything you are running) is running in an elevated manner (even though you did not specifically do anything to cause Everything to run elevated).

[void]

Please make sure Everything is installed correctly and running as a standard user:

• In Everything, from the Tools menu, click Options.
• Click the General tab on the left.
• Check Store settings and data in %APPDATA%\Everything.
• Uncheck Run as administrator.
• Check Everything Service. (Please make sure this is tick-checked and not square-checked)
• Click OK.
• Exit Everything (from the File menu, click Exit).
• Restart Everything.

Other common causes for Everything running as administrator:

Please make sure Everything is installed correctly and running as a standard user:

• In Everything, from the Tools menu, click Options.
• Click the General tab on the left.
• Check Store settings and data in %APPDATA%\Everything.
• Uncheck Run as administrator.
• Check Everything Service. (Please make sure this is tick-checked and not square-checked)
• Click OK.
• Exit Everything (right click the Everything tray icon and click Exit).
• Restart Everything.

Please make sure Everything is running as a standard user:

• Right click your Everything.exe or a shortcut to Everything
• Click Properties.
• Click the Compatibility tab.
• Uncheck Run this program as an administrator.
• Click OK.

Please make sure Everything is running as a standard user:

• Right click your Everything.exe or a shortcut to Everything
• Click Properties.
• Click the Shortcut tab.
• Click the Advanced button.
• Uncheck Run as administrator.
• Click OK.
• Click OK.

Please make sure Everything is running as a standard user:

• Right click your Everything.exe or a shortcut to Everything
• Click Properties.
• Click the Compatibility tab.
• Click the Change settings for all users button at the bottom.
• Uncheck Run this program as an administrator.
• Click OK.

Check if the program that launched Everything is also running as administrator.
An easy way to do this is with Process Explorer.
Check the integrity of the parent process. (right click the column header and select the Integrity column if it is not shown)
Typically this will be explorer.exe running with Medium integrity.
What is shown for you?

Without folder indexing you can't run Everything without Admin rights

Everything can use NTFS indexing for non-system NTFS volumes without admin privileges.
Most users will want to index their C: drive which is always marked as a system volume.

[anmac1789]

I've done all the above steps and this is the process explorer windows. When I run everything it still shows administrator

Screenshot 2023-06-10 014628.jpg (393.07 KiB) Viewed 20567 times

[void]

Explorer.exe is running Elevated. (shown as high integrity in Process Explorer)

Anything you launch from Explorer.exe will run elevated.

You'll need to figure out why Explorer.exe is starting elevated.
Please check any startup scripts and scheduled tasks.

[anmac1789]

Explorer.exe is running Elevated. (shown as high integrity in Process Explorer)

Anything you launch from Explorer.exe will run elevated.

You'll need to figure out why Explorer.exe is starting elevated.
Please check any startup scripts and scheduled tasks.

How do I know why or what is making explorer.exe run elevated?

[tuska]

Hi,
I suggest considering the following:

Press the Windows logo key + i ...
System > Click on "About" then on "Domain or workgroup" > Confirm the user account control request (UAC) >
Click on "Advanced" tab > User profiles: Settings... > User profiles are shown

For example, these user profiles are displayed for the PC.
 

2023-06-10_User and administrator accounts.png (90.23 KiB) Viewed 20527 times

 
When I press the start button in Windows, "user" is displayed,
if I now click on the "user", then "Administrator" is displayed to me as another account.

The image shows that I have logged on to my PC with my "user" account (no administrative rights).

What does this look like for you?

Do you have more than 1 account?
If you only have 1 account, then it probably runs as a "real administrator account".

In such a case you should create an additional user account - without administrative rights:
Control Panel\User Accounts\User Accounts\Manage Accounts... --> Google can certainly help here more than I.

(However, I am not an expert...)

[void]

Administrator accounts should still run as Medium integrity.

Are you using the true "administrator" account?
-The true "administrator" account will run with High integrity.

[anmac1789]

Hello this is what I see in my user profiles settings

Screenshot 2023-06-12 015834.jpg (57.13 KiB) Viewed 20471 times

I'm using windows 10 and when I click start this is what I see

Screenshot 2023-06-12 020025.jpg (69.51 KiB) Viewed 20471 times

[NotNull]

I suspect your Windows account itself causes all programs -- including Explorer and Everything -- to be run with high privileges

To check:

• Start Command Prompt ( CMD.exe )
• Type or paste the following command and press ENTER:
  
  whoami.exe /groups
• Find the Mandatory Label/... group name
• Find the SID for that entry
• The SID can be any of the following:
  • S-1-16-4096 ( = Low)
  • S-1-16-8192 ( = Medium)
  • S-1-16-12288 ( = High)
  • S-1-16-16384 ( = System)
• Report back the SID for your user account
• If not Medium or Low, you need to create a new useraccount with less privileges for daily operation [1]

To create a new usraccount:

• Press 'Win + R' to activate the Run dialog
• Type
  lusrmgr.msc
• Press 'Ctrl + Shift + ENTER' to start this program elevated
  Local Users and Groups will open
• Right-click Users
• Select New User from the context menu
• (fill in the settings the way you want it)
• Press the Create button
• Press the Close button

To test:

• Log off
• Log in with the newly created user account
• Run whoami /groups for this user
• Report back the current SID
• Done.

SID for 3 different user accounts:

2023-06-12 11_50_29-.png (119.91 KiB) Viewed 20458 times

[1] "Need" is a bit too strong here, but it is highly recommended

[therube]

When I posted, I was going to say that even if you are running "as Admin", Windows Explorer (typically) still runs with Medium integrity.

And it sure looks like having Windows Explorer (explorer.exe) running as "High" is highly unusual.


(It was said, that in Win8 disabling UAC causes explorer.exe to run as High.)


Maybe, How to Restart Explorer.exe Cleanly in Windows 10 or 11?


I like the create a new User account idea, logging into it, & seeing how that runs (at which integrity level).


(Oh, & it also appears that Chrome runs at an Untrusted level - though, you do have some aspects [of it] running at High [not good, I'd think] where ordinarily [I'd think] those particular parts would be running at Medium.

The only thing I have, that I am aware of [Win7] that runs Untrusted is Sandboxie.)


You might even reboot your computer into Safe Mode, log into your current account, & see if you're still High?

[anmac1789]

I had a similar problem before where i disabled run as admin in everything options then void suggested that i uncheck run as admin in the everything.exe properties dialog box when i unchecked then it worked but that was a few months ago. I dont understand why this time unchecking and disabling run as admin still runs everything as admin ?

Screenshot 2023-06-12 180504.jpg (160.41 KiB) Viewed 20431 times

When I uncheck run as admin in everything options it says everything will be restarted but a new everything window does not open

[therube]

Because "Windows", your user account (itself, explorer.exe) is running High.
So everything spawned from "you" is then also running High.

You have to figure out why you are running High (which I expect is highly irregular).


(Language warning, if you're into that, but it's funny, well, funny to me)
Because I Got High.


Your issue has nothing to do with Everything, but it is affecting everything (& Everything, too).
(And it is not right.)

[NotNull]

Exactly!

If not Medium or Low, you need to create a new useraccount with less privileges for daily operation

[anmac1789]

How the heck …. i dont know when my windows was running in high mode .. it was mot known to me should i re rnable UAC ?

[void]

Can't hurt to try.

From my tests on Windows 10, disabling UAC prompts will still run explorer with medium integrity.

[NotNull]

Will probably depend on the Windows version. Win7 behaves different from Win10. Not sure about user integrity level though.

[froggie]

Tested on Windows 7. Turning UAC off will run standard Admin user as High, turning UAC back on runs same user as Medium.

[anmac1789]

yes i just tested the same thing, enabling UAC back to recommended restored everything to run without administrator. Im not sure if other programs might be affected. Im using windows 10 x64 enterprise

[Daveargecy]

I too always end up back as Administrator. I've tried many suggestions to no avail

Also having issues with the search results not showing matching content. I've rebuilt the indexes, checked every option for correct setting etc, still no love.

[NotNull]

Please tell us what you already tried, so we can fill in the missing pieces.

BTW:
What version of Everything?
What mandatory level is your user account running? (see above)

[Daveargecy]

Using 1.5
Tried almost all the suggestions in the forum.

I don't really care if I am administrator or not, just want full function as if I were a regular user.

I have had lots of trouble getting the contents to be indexed and I am abou 70% though that reindexing, so hopefully this is resolved.

Couple other questions:
It sure sucks down a lot of memory... any way to have that just saved on the drive? I know it wont be as fast, but it would still, presumably, be faster that Win Explorer.

Where do I find details, examples, tutorials, etc on using the http server?

[void]

Your content index is stored in memory.
Content indexing will use a lot of RAM.

Please exclude as many files as possible with your content exclude filters.
Everything is only designed to index about 1GB of text content.

To check your content index size:

• In Everything 1.5, from the Tools menu, under the Debug submenu, click Statistics.
• The total content index size is shown under: File data size

[user123]

yes i just tested the same thing, enabling UAC back to recommended restored everything to run without administrator. Im not sure if other programs might be affected. Im using windows 10 x64 enterprise

I'm on Windows 11 24h2 and had the same issue. Switching slider to 1 level above OFF (never notify) and restarting the PC resulted in everything.exe now running as standard user and not admin.

image.png (55.58 KiB) Viewed 7680 times

Process explorer also now shows explorer.exe to be MEDIUM integrity. Previously when UAC was off, it was on HIGH priority.

[AntonyD]

Is it possible to introduce some kind of mechanism for checking this very increased permission in rights?
Because now I've spent almost 4 hours trying to find the reason why your program is persistently
running as an Administrator. At least it is even possible to make such an algorithm - if the user has already tried
to uncheck the settings for running with Administrator rights more than 3 times in a row, and tool constantly resets this
checkmark back: because from the outside, some external conditions of forced launch on behalf of the Administrator affect
the start of the program: then display an auxiliary help icon " " - by clicking on which tool could at least moves the user
to this forum - to some kind of message that most competently explains the reason for this situation and gives further possible
steps for the user so that the check mark can be finally unchecked and allowed to run a program for a regular
user.

[void]

Is Tools -> Options -> General -> Run as administrator checked?

If this is setting is getting checked, and not by you, please make sure Everything is installed correctly:

• In Everything, from the Tools menu, click Options.
• Click the General tab on the left.
• Check Store settings and data in %APPDATA%\Everything.
• Uncheck Run as administrator.
• Check Everything Service. (Please make sure this is tick-checked and not square-checked)
• Click OK.
• Exit Everything (from the File menu, click Exit).
• Restart Everything.

Does the issue persist?

[AntonyD]

You misunderstood the message of my post!
There was a problem and yes - I was able to figure it out and make the program start running as a normal user.
But NO - the main problem was not that, it was that the program was in no way prepared to tell the user that there is
an EXTERNAL reason that any restart of the program after unchecking the desired box in the settings does not lead
to the desired result.

That's why I described the desired graphical improvement of the settings dialog itself!
IF the program can understand - that it is being forced to run constantly on behalf of the Administrator - then
the program itself should print the auxiliary element " " clicked on which either an offline page opened
help with a description of all the ways to fix this situation, or the online page of this forum - perhaps even directly this one
topic, so that the user can immediately start reading and understand the external causes of incorrect program behavior.

P.S. external reason here means: "Explorer.exe is running Elevated. (shown as high integrity in Process Explorer)" - exactly
as you said it a few posts above...

[void]

The "Run as administrator" option does have a tooltip.

When hovered over:

Run Everything as an administrator when launching Everything.
Enabling might show user account control prompt when launching Everything.
The "Everything" service is not required when running as administrator.
Warning: When enabled, Applications run from "Everything" will also run as administrator.
Requires restart.
Unchecked = run as a standard user.
Tick-checked = run as an administrator.
Indeterminate = run as a standard user. (currently running as an administrator)



Indeterminate = run as a standard user. (currently running as an administrator) could be improved and clarify that Everything was launched externally as admin.

[AntonyD]

Clarification "that Everything was launched externally as admin." SHOULD be added - but not in a regular tooltip
which most of us even never saw i think - but in a special additional GUI element like " " - which will on 1000%
guarantee that the end-user will click on it and will read all additional help info about this strange situation.