使用任何现代版本的Windows(Windows)最令人困惑的方面之一是区分管理员帐户和具有管理权限的帐户。从Windows Vista到Windows 7，操作系统以管理员身份处理正在运行的应用程序，这与以前的版本完全不同。
Windows XP的问题之一是标准用户在处理仅限于管理员的事情时会束手无策。但是，具有管理权限的帐户可以不受限制地访问 PC 上的任何内容。这造成了两个安全问题。
首先，标准用户帐户受到如此严格的限制，以至于大多数人都在具有管理权限的 XP 计算机上设置了所有帐户。其次(Second)，具有管理权限的被劫持帐户无法保护自己免受运行未经授权的程序或访问私人文件夹的影响。然而，对于Windows Vista和 7，Microsoft在太多和太少的限制之间做出了巧妙的权衡。
管理员审批模式
为了解决以前操作系统的特权问题，这家软件巨头只允许管理员帐户完全、不受限制地访问 PC 的各个方面。具有管理权限的帐户在技术上作为标准用户帐户运行，直到需要需要管理权限的操作。此时账户暂时进入管理员审批模式(Admin Approval Mode)，操作完成后重新进入标准用户模式。
这种标准用户与管理特权用户的方法提高了安全性并禁止启动任何未经授权的应用程序。不幸的是，微软(Microsoft)在Windows Vista中要求几乎所有东西都必须具有管理权限，这有点过火了。在Windows 7中，Microsoft消除了烦人的消息，并为具有管理权限的帐户用户创造了平衡的体验。
但是，如果安全性对您的 PC 来说不是什么大问题，您可以禁用管理员批准模式(Admin Approval Mode)并允许您的具有管理权限的帐户像管理员帐户一样操作。为了方便而牺牲安全性，您可以让 Windows 7 中的管理帐户像在(Windows 7)Windows XP中一样自由运行。
如何关闭管理员批准模式
(Log)使用具有管理权限的帐户登录Windows 。(Windows)然后，单击Start>All Programs>Administrative Tools>Local Security Policy。
这将打开“本地安全策略”(Local Security Policy)选项窗口，您可以在其中更改Windows运行方式的许多功能。
在“本地安全策略”(Local Security Policy)窗口的左侧窗格中，单击“本地策略(Local Policies)”文件夹，然后单击“安全选项(Security Options)”文件夹。现在，您应该在右侧窗格中看到许多可用的选项。
在右侧窗格中，找到标题为User Account Control: Run All Administrators in Admin Approval Mode的选项。
右键单击此选项并从菜单中选择属性。(Properties)请注意(Notice)，默认设置为Enabled。选择Disabled选项，然后单击OK。
Windows 7 将通知您需要重新启动计算机才能使更改生效。重新启动您的 PC，下次使用管理员帐户登录时，管理员批准模式(Admin Approval Mode)将被禁用。
在管理帐户方面，微软在安全性和可用性之间的权衡在Windows 7(Windows 7)中比在以前版本的操作系统中要好得多。但是，通过关闭Admin Approval Mode，您可以强制Windows 7将属于管理组的所有帐户提升到管理级别。
他们将不再陷入标准用户模式，要求管理员批准所有需要更高级别权限的操作。
Turn Off Admin Approval Mode in Windows 7
One of the most confusing aspects to using any modern versіon of Windows is making the distinction between the administrator account and аn account with admіnistrаtive privilеges. Starting with Windows Vista and carriеd through to Windows 7, the operating system handles running applications as an administrator quite dіfferently than in рreνious νersions.
One of the problems with Windows XP was that standard users had their hands tied when it came to doing things restricted to admins only. Accounts with administrative privileges, however, had unbridled access to anything on the PC. This created a two security issues.
First, the standard user account was so restricted that most people set up all of their accounts on an XP computer with administrative privileges. Second, a hijacked account that has administrative privileges had no way to protect itself against running unauthorized programs or accessing private folders. With Windows Vista and 7, however, Microsoft made an ingenious trade-off between too many and too few restrictions.
Admin Approval Mode
To combat the privilege problem of previous operating systems, the software giant gave only the administrator account full, unrestricted access to all aspects of the PC. An account with administrative privileges technically operates as a standard user account until an action requiring administrative permission is needed. At that time, the account temporarily enters Admin Approval Mode and reenters standard user mode after the action is complete.
This method of standard user vs. administrative privileged user increases security and disallows any unauthorized applications from launching. Unfortunately, Microsoft went a little overboard in Windows Vista by requiring just about everything to have administrative permission. With Windows 7, Microsoft backed off the annoying messages and created a balanced experience for users of accounts with administrative privileges.
However, if security is not much of an issue for your PC, you can disable Admin Approval Mode and allow your accounts with administrative privileges to operate as if they were the administrator account. Sacrificing security for convenience, you can make an administrative account in Windows 7 operate as freely as it did in Windows XP.
How to Turn Off Admin Approval Mode
Log in to Windows using an account that has administrative privileges. Then, click on Start>All Programs>Administrative Tools>Local Security Policy.
This will open up the Local Security Policy options window where you can change many features of how Windows operates.
In the left hand pane of the Local Security Policy window, click on the Local Policies folder and then the Security Options folder. Now, you should see numerous options available to you in the right hand pane.
In the right hand pane, locate an option titled User Account Control: Run All Administrators in Admin Approval Mode.
Right click on this option and select Properties from the menu. Notice that the default setting is Enabled. Choose the Disabled option and then click OK.
Windows 7 will inform you that you need to restart your computer for the changes to take effect. Restart your PC and the next time you log in with an administrative account, Admin Approval Mode will be disabled.
When it comes to administrative accounts, Microsoft’s tradeoff between security and usability is much better in Windows 7 than in previous versions of the operating system. However, by turning off Admin Approval Mode, you can force Windows 7 to keep all accounts that belong to the administrative group elevated to the administrative level.
They will no longer sink down into standard user mode requiring the administrator to approve all actions that require higher level permissions.
