LUA, Applocker, Sandboxie

I'm looking into using only LUA, Applocker and Sandboxie for security. I have a few questions:

At the moment I just have the default settings for Applocker set up and I am using an Administrator account yet I can't run .exe files outside of Program Files (and presumably the Windows folder; haven't tried). With default settings, shouldn't an Administrator be able to run all files?

Are the default settings in Applocker adequate enough, creating allow rules when necessary for programs I use and trust?

I remember reading somewhere that you need to change Application Identity in services to Started and Automatic to use Applocker properly. Is this true? I haven't seen it mentioned anywhere else.

Edit: Does UAC in an Administrator account offer similar protection that LUA offers?

 

You should be unless you removed one of the default rules
http://technet.microsoft.com/en-us/library/dd723675(WS.10).aspx

you do need to enable Application Identity and set to auto
http://technet.microsoft.com/en-us/library/dd723693(WS.10).aspx#BKMK_ConfigureAuditOnly

 

Thank you, Cudni.

I can run the files if I right click and choose Run as administrator. Is that expected?

 

First it not "just LUA, Applocker and Sandboxie". This combo is stronger than any combo apps out there ok? No conflict and very very power. Probably most power of all.
https://www.wilderssecurity.com/showthread.php?t=272761

 

Yes that is correct ok. It is to do with UAC.

 

Perhaps look at Limited User Account (LUA) and highest UAC level overkill?