Using the Windows 7 EUR tool

IT Services has developed a program called the Elevated User Rights (EUR) tool that allows users of University computers to install and uninstall software on demand. The tool is available for Windows 7 64-bit.

The EUR tool replaces Windows built-in "admin rights". It has two main features that greatly lower the risk of security problems:

  • You can use EUR when needed and do not need to run with full admin rights all of the time.
  • Programs cannot demand EUR themselves; it can only be triggered by users.

This page describes how to use the tool.

The EUR tool works with nearly all programs but please contact the Service Desk if you're having difficulty and we will help. This may entail fixing the program or increasing your level of access.

Please see Applying for Elevated User Rights access if you do not have EUR access.

Expert users may be interested in Technical details for Windows 7 EUR tool. This page also has Information for IT support staff.

Please note: alternative Elevated User Rights processes are available for other systems.


Deciding what to install

You should only install software if you have an appropriate license and the software is required for your work.

Please check if the software you need is available via software self-service before you install it with EUR, and contact the Service Desk before installing standard University software as we may be able to install it automatically.

Do not use Elevated User Rights to update or modify automatically installed software. This may break future security updates.


Install a program with Elevated User Rights

To install a program with Elevated User Rights follow these instructions. There may be some exceptions; these are covered in the Notes section below.

  1. Right click the installation file and choose Run with Elevated User Rights.
  2. A pop-up box will ask you to confirm the action. Read the message and click OK if you agree.
  3. A User Account Control window will ask if elevate.exe is allowed to make changes to your computer. Enter your UOB password and click OK.
  4. Install the program as normal.

Notes

  • You won't see the Run with Elevated User Rights option if you right click an item on the first screen of the Start menu. However, you will see it in Start menuAll Programs or in the results of a search. (If you do not get an option for EUR, try holding the shift key while you right click.)

  • If you want to install software from a CD, and try to do this by "running" the CD, you will probably get elevation prompts asking for an administrative user name and password. You should note the name of the program, and then close the window. You can then directly run the program with Elevated User Rights.

  • If the file you want to install is in a ZIP file (or other archive), unpack it before trying to install with Elevated User Rights.

  • If the instructions for the setup say you have to launch the program with specific command line options, then you have two options: create a shortcut to the program, and add the options to the Target line in the shortcut properties, or run the program from a command prompt launched with Elevated User Rights.

  • Finally, a very few installations just won't run with Elevated User Rights, but will only work for a genuine administrator. If you have problems of this kind, please contact the Service Desk and we will help.

(Back to top)


Uninstall a program

  1. Click the Start menuAll ProgramsEUR ToolsPrograms and Features.
  2. A pop-up box will ask if you intend to start Programs and Features with Administrative rights. Click OK.
  3. Enter your UOB password when prompted by User Account Control.
  4. Explorer++ will open. Right click the program you want to remove and click Uninstall.
  5. Uninstall the program as normal.

(Back to top)


Copy/move/rename restricted files and folders

  1. Run Start menuAll ProgramsEUR ToolsPrograms and Features as above. Enter your UOB password when prompted.
  2. Click GoComputer.
  3. You will see a familiar view of your computer's disks. Any changes that you make in this window are applied with administrative rights. This means that you can alter files in restricted areas of the disk, e.g. C:\Program Files

Tip: click ViewFolders and ViewToolbarsAddress Bar to make Explorer++ look more like Windows Explorer.

(Back to top)


Edit configuration files in restricted folders

  1. Right click Notepad (or another text editor) and choose Run with Elevated User Rights. Enter your UOB password when prompted.
  2. Open your configuration file via FileOpen.
  3. Notepad is running with administrative rights and you are able to save to restricted areas of the disk.

Tip: if you find that your changes are having no effect try checking this location:

StartRunshell:local appdata\VirtualStoreOK
(you do not need to use EUR in this folder)

(Back to top)


Allow a program to update itself

  1. Right click the program in Start menuAll Programs and choose Run with Elevated User Rights.
  2. If you do not get an option for EUR, try holding the shift key while you right click.
  3. Enter your UOB password when prompted.
  4. Allow the program to update. (This option is often found in the Help menu.)
  5. Once the program has updated, close it. Next time you want to use it, open it without EUR.

Tip: if the program's update option doesn't work, you can usually just download the current installation file and run that with EUR.

(Back to top)


Add a plugin/module/package to an application

This normally involves putting a file in a special folder (see Copy/move/rename restricted files and folders) or selecting a file within the application itself (see Allow a program to update itself for instructions on running a program with EUR).

However, most applications let you add plugins without EUR/admin rights if you know what to do. You should look in your program's manual before you make any administrative changes. If in doubt, please contact the Service Desk.

(Back to top)


Install drivers

There are two ways of installing drivers:

  1. Download an installation file for the driver. Right click the file and choose Run with Elevated User Rights:

    1. Open Start menuAll ProgramsEUR ToolsAdvancedDevice Manager.
    2. Enter your UOB password when prompted.
    3. Right click your device, and choose Update Driver Software... (If you can't find your hardware, look in Other Devices.)
    4. Choose Search automatically... to get Windows to try and find a driver for you, or Browse my computer... if you already have the right files.

Tip: you can unpack many driver installers with 7-Zip and use the files inside with Device Manager.

(Back to top)


Perform other administrative tasks

  1. Run Start menuAll ProgramsEUR ToolsPrograms and Features as above. Enter your UOB password when prompted.
  2. Explorer++ will open. Use the Go menu to open the Control Panel etc. with elevated rights.
  3. Further administrative options can be found under Start menuAll ProgramsEUR ToolsAdvanced.

(Back to top)