Vista: How to disable split-token admin but not UAC?

[InlineFive]

Hey all,

I've run into a situation where I need to have SRP make exceptions for admin accounts. However, this is not working as it should because of the split-token for the admin accounts. Is there a way to make the admin account run under the full token while still using UAC on the system?

So far I haven't seen a way, darn.

I5

 

[mechBgon]

What about either creating Additional Rules (path, hash, or certificate) to allow for your exceptions, or putting the stuff in a place the SRP has set to Unrestricted? Sorry for the stoopid questions

 

[InlineFive]

Not stupid at all, that'll do the job. D'oh!

 

[mechBgon]

Then I'll throw one more silly one on there: right-click the whatever-it-is and choose Run as Administrator and this gets you past the SRP too (useful for running software installers or patches from a CD, USB stick, or network share).