
Applications can use the full administrator access token if the administrator user clicks Allow in a User Account Control dialog box. This filtered access token is used to start the user’s desktop. If LSA is notified that the user is a member of the Administrators group, LSA creates the second logon that has the administrator rights removed (filtered). When an administrator logs on to Windows Vista or newer, the Local Security Authority (LSA) creates two access tokens. If you click Allow in the User Account Control dialog box, you can then complete the administrative task by using the full administrator access token. For example, you are prompted if you try to edit security policies on the computer. If you are a member of the Administrators group and if you want to perform a task that requires a full administrator access token, User Account Control prompts you for approval. Standard users are members of the Users group. When a member of the Administrators group logs on to a Windows Vista-based and newer computer that has User Account Control enabled, the user runs as a standard user. This problem occurs because User Account Control treats members of the Administrators group as standard users. Microsoft made a change in Vista or newer operating system such that drives that were mapped without elevated privileges cannot be seen by processes run with elevated privileges. This issue is due to security changes introduced with Windows Vista. SyncBackPro/SE cannot see networked drives but SyncBackFree can. Modified on: Wed, 8 Jun, 2022 at 10:52 AM Solution home Technical Articles Network Cannot see networked/mapped drives in SyncBackSE/Pro
