With the release of Windows 10 today, many are spinning up VMs and
loading the new workstation on test boxes to take a look at the final
build version. If you are like me, one of the first things I wanted to
test drive was the final release build of the Edge browswer. Quickly
however, I ran into an issue (security feature) out of the box with the
built-in administrator account attempting to launch Edge. I received
the error Microsoft Edge can’t be opened using the Built-in Administrator account. Sign in with a different account and try again.
Microsoft has went the direction of making the Edge browser a true app now and additional security is in place much like the Internet Explorer Enhanced Security that we have grown to love and hate.
In order to get around this message in your test environment and be able to use your Built-in Administrator account to navigate Edge, follow the following steps to get up and running.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Next we need to navigate to the registry and make an additional change:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Over on the right-hand side, you should see a setting for EnableLUA, which you’ll want to customize as follows:
Microsoft has went the direction of making the Edge browser a true app now and additional security is in place much like the Internet Explorer Enhanced Security that we have grown to love and hate.
In order to get around this message in your test environment and be able to use your Built-in Administrator account to navigate Edge, follow the following steps to get up and running.
- Navigate to your local security policy on your Windows 10 workstation – You can do this by typing secpol.msc at a search/run/command prompt.
- Under Local Policies/Security Options navigate to “User Account Control Admin Approval Mode for the Built-in Administrator account“
- Set the policy to Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
- Create a DWORD value if it doesn’t already exist called FilterAdministratorToken
- Set Value To: 1
Next we need to navigate to the registry and make an additional change:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\
- Change the Default string key to 0x00000001(1)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Over on the right-hand side, you should see a setting for EnableLUA, which you’ll want to customize as follows:
- Change EnableLUA
- Set Value To: 1
Thnxxxxxxxxx
ReplyDeleteOk!!!
ReplyDeletethanks done.....................
ReplyDeleteThanks sir
ReplyDelete