Elevation to Administrator

  • Thread starter Thread starter Bill Clinton
  • Start date Start date
B

Bill Clinton

I have three questions regarding elevation:

a. How do I do it on the command line for a particular program other than
elevating the whole command shell?

b. When I right click, some programs have Run as administrator but some
not. How do I get those with not to have that option?

c. What's the difference between a user in the Administrator group running
as administrator and when not running as administrator? What is the list of
rights when running as administrator and an administrator not running as
administrator? Where is the documentation for this?

Thanks.
 
a. How do I do it on the command line for a particular program other than
elevating the whole command shell?
Click to expand...

You need something like my elevate tool:
http://msinfluentials.com/blogs/jesper/archive/2007/07/11/tools-from-the-vista-security-book.aspx
b. When I right click, some programs have Run as administrator but some
not. How do I get those with not to have that option?
Click to expand...

You can't. At least not easily. They are designed specifically to prevent
elevation. You can try elevating them with elevate.exe, but it is not
guaranteed to work properly. For example, you cannot elevate explorer.exe
that way.
c. What's the difference between a user in the Administrator group running
as administrator and when not running as administrator? What is the list of
rights when running as administrator and an administrator not running as
administrator? Where is the documentation for this?
Click to expand...

When you are running under UAC a number of privileges are stripped,
including all the ones that are considered sensitive. In addition, the
Administrators SID in your token is set to deny only. There is complete
documentation on this in the Vista Security book in my signature.
 
Back
Top