• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Started Norton Security as admin, but cannot change settings

Hello!

Running Windows 10 with a user (non-admin) account.
When opening Norton Security, I cannot change the settings for firewall, Antivirus etc. Ok, I understand this.
But when explicitly opening Norton as administrator, I still cannot change these settings.
So I'm forced to log in with my administrator account to change these settings.
This isn't good, because sometimes Norton gives me messages about running programs, which I don't want to have. I just recently installed Norton and I'm still in the evaluation phase, and I still have to "fine-tune" my Norton settings, while I do my normal work.

So, I think, this might be a bug, because when explicitly starting Norton Security as administrator, it should be possible to have full access over the settings in Norton Security.
Another possibility could be: When opening the settings, Norton could ask me, whether I want to open the settings as administrator.

Or - as I'm new a Norton - perhaps I made something wrong?

Thanks for your answers,
Ekkr

Replies

Kudos0

Re: Started Norton Security as admin, but cannot change settings

Hi Ekkr,

3 cents:

  • Non Admin (known as a security hole - NOT a bug) has been removed;
  • only Admin should have full access to manage Norton settings;
  • and Settings Password Protection is under Administrative Settings > Product Security.

For more info, you may Chat with Norton Support.

Please post back if this or any other comment solves your problem. THX...

PUP Hunter PRO: Just TRYING to save the world (U) from cyber threats, A single blog post, at a time, and ONCE & FOR ALL. (A fan of Nadia_Kovacs)
Kudos0

Re: Started Norton Security as admin, but cannot change settings

Opening the GUI (dashboard) does not restart the entire program and services as Administrator.

Dave

Kudos0

Re: Started Norton Security as admin, but cannot change settings

Hello,

thank you for your answers.

Still, this behavior of Norton Security ("Dashboard") is not acceptable for me. It's annoying to be forced to change the Windows account, when I want to change some Security settings. I don't understand, why I'm not allowed, although having opened the dashboard with Windows administrator privileges. May be, there is a certain explanation for this behavior.

I tried the password protection - this didn't help. Changing the settings is still only possible, when I'm logged in (in Windows) as administrator. So, the sense of this protection is to additionally save administrators?
Also funny: With activated password protection, I cannot see the any settings (when logged in as admin), before I entered the (protection) password. But when logged in as normal user, I'm not asked for the password when entering settings. So, as normal user I can see (sure, not change) the settings, although password protection is active. Something illogical...

It's a pity, but Norton Security doesn't seem the right product for me, just because of this small matter being a bother for me.

Thanks again,
Ekkr

Kudos0

Re: Started Norton Security as admin, but cannot change settings

You cannot just open Norton as administrator. You have to be logged into a Windows admin account.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Started Norton Security as admin, but cannot change settings

Hello

The idea of having to use a Windows Administrator Account is a Security feature. It's not a bug. Having to login using a Windows Admin Account helps to prevent hackers or malware to change the programs settings. It adds another layer of protection. Once you get the program set up the way you want it, then you can log in with a user account and go on with your work. It makes it harder for malware to make changes to the firewall or other features.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.18.0.213 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Started Norton Security as admin, but cannot change settings

Thanks a lot for your explanations.

Kudos5 Stats

Re: Started Norton Security as admin, but cannot change settings

Think of it this way - Any thing Administrative-wise (system-level modifying) that can be done by a non-administrative-level user within a User-level Windows account login that gains meaningful system-level modification access permissions, even if only via a temporary elevation, could (conceivably) also be done by a rouge-ware/mal-ware infection residing in a User-level account via the same means. Therefore earlier Norton products that allowed this have been corrected to no longer permit it.

Why MS even (by default) permits temporary elevations is, frankly speaking - beyond me. Changing this Windows default requires knowledge of Windows Policy settings. It's not a problem for (most) PDC controlled (Active Directory) "business installations" because they're usually under the control of IT Departments who (theoretically) know what they're doing when it comes to such matters.

Therefore, because (by default) this potential Windows security-gap exists (in most every consumer-class Windows system), I feel it's always better to create a dedicated Admin-level Windows account that's held in reserve and used only to effect changes such as those you require done to your Norton product's system-level-critical configuration settings. Just: Log into it - Make your changes - Then log out of it (then back into your User-level account). By using that Admin-level account only for such purposes you'll avoid most "potential cross pollinations" of many of the potential "bad things" you may have running around in your system's User-level accounts - doing this is just consumer-level "good housekeeping" of Windows...

Cheers!

Kudos0

Re: Started Norton Security as admin, but cannot change settings

Hello!

May be, I made this not clear enough: I have exactly this, what you describe: a normal user account, under which I do my daily work. And for administrative purposes I have an administrator account, which I seldom use.

So, in the "normal user" context, when opening any application as administrator (e.g. right-click on the desktop symbol, then "run as administrator"), Windows pops-up an dialog box requiring the password of my administrator account (Malware cannot do this, can it?).
So, after that, the application runs in the administrator's rights context, and all applications I know then give me full access to the application's settings etc. But Norton doesn't. And that's what I don't get.

But ok, it is as it is. This little matter bothered me. I have to live with it, or use another antivirus software.

Thanks all,
Ekkr

Kudos2 Stats

Re: Started Norton Security as admin, but cannot change settings

Johnnie sums it up perfectly.

Except for one problem, and that's the fact that even if Microsoft disallowed temporary elevations malware will always be able to exploit some flaw to gain administrator access.

The nature of the beast is that the more advanced and useful an operating system becomes the more ways there are to exploit it.  I don't think it's possible to have a totally secure system that is full featured and usable to everyone without computer knowledge.  It's usually the things that make the computer easy to use or features that bring rich online entertainment or experiences that create ways to exploit a system.  Plug an Play, point and click, graphics, email, java, flash, macros, etc.  The very things that make computers fun, entertaining, and easy to use.

I guess I go against the grain.  I hate having to bother with passwords and UAC.  I would never recommend it to anyone but I turn off UAC and use an administrator account without a password so my systems boot directly into windows and I don't have to bother with the annoying UAC prompts and confirmations.  :)

Although a good AV is absolutely necessary, they will never become 100% accurate, to a certain extent they are always one step behind on new threats. 

My #1 line of defense is complete and thorough system images and backups including second copies held offsite and not connected to any system or the internet.  Also, being able to quickly recognize if something is wrong or not working perfectly.

On the other hand, maybe I'm just lazy.

Dave  

Kudos0

Re: Started Norton Security as admin, but cannot change settings

I have another thought: If a malware is still running on your system, it is normally also running, when you switch to the admin account. So, temporary elevation of the access rights of a single application might be more save than switching to the admin account, where the malware then has full access over the whole system.
However, I don't know, whether my thoughts are correct.

Kudos0

Re: Started Norton Security as admin, but cannot change settings

Ekkr:

Hello!

May be, I made this not clear enough: I have exactly this, what you describe: a normal user account, under which I do my daily work. And for administrative purposes I have an administrator account, which I seldom use.

So, in the "normal user" context, when opening any application as administrator (e.g. right-click on the desktop symbol, then "run as administrator"), Windows pops-up an dialog box requiring the password of my administrator account (Malware cannot do this, can it?).
So, after that, the application runs in the administrator's rights context, and all applications I know then give me full access to the application's settings etc. But Norton doesn't. And that's what I don't get.

But ok, it is as it is. This little matter bothered me. I have to live with it, or use another antivirus software.

Thanks all,
Ekkr

I understand your frustration, but the fact is that the necessary Administrative "breadth of scope" needed by Norton's protected codebase to effect most of its configuration changes are left unmet by the simplified implementation afforded via the Windows temporary Administrative elevation. This requirement is just better security - The earlier Norton products used to effect a bridge to allow it, but that was (correctly) rethought because you really don't want to be able to breach/penetrate that secure perimeter implemented by the Windows Kernel - doing so is best likened to giving your enemies the master-key to your city.

Cheers!

Kudos0

Re: Started Norton Security as admin, but cannot change settings

Ekkr:

I have another thought: If a malware is still running on your system, it is normally also running, when you switch to the admin account. So, temporary elevation of the access rights of a single application might be more save than switching to the admin account, where the malware then has full access over the whole system.
However, I don't know, whether my thoughts are correct.

FWIW, Norton/Symantec is pretty darn good at what they do. Sure - there are times when I nit-pick certain product aesthetics with them (just like everyone else does,,) but I always find (have known) that the base implementation is exemplary to say the very least.

And know too that the Windows Login "shell/console" is very secure, but there are additional options afforded you (by Windows) to harden it even further (i.e. Ctrl-C to login, etc.).

Cheers!

Kudos0

Re: Started Norton Security as admin, but cannot change settings

BTW, after years of using other good AV software, I more or less accidentally came back to Norton, and until now (some days) I'm impressed, how little Norton affects my (new and fast) computer's performance - one of my greatest fears using AV software. In the past, that was the reason to leave Norton. Also the price is really good. So, I'll further evaluate Norton (20 days remaining) and give it a chance.

Thanks all for your arguments and explanations,
Ekkr

This thread is closed from further comment. Please visit the forum to start a new thread.