11
votes
Entering local admin username and password in a script
Start your batch:
powershell.exe -Command "Start-Process cmd -Verb RunAs"
...
rest of script
...
This will open an elevated command prompt
Keep in mind for this to work the user would need to have ...
- 9,566
4
votes
Accepted
Creating Separate GPOs for Win7 and Win10
You can do this by creating two OS-specific GPOs and using WMI filters to assign them to the appropriate machines.
One GPO will include the settings for Windows 7, and have a WMI filter that ensures ...
- 3,459
3
votes
Accepted
Run application on any user sign in/log on with elevated privileges
If you must have a GUI, then the correct way to handle this is to have a GUI app and a separate system service. The service does the actual work, and the GUI just passes commands to it. Impersonation ...
- 23.1k
3
votes
WMI permissions for changing local IP without elevated privileges
Try making him or her a member of the local group: 'Network Configuration Operators'.
- 5,789
3
votes
NTFS - Domain Admins don't have permissions despite being part of the Local Administrators group
Set both these policies for members of local Administrator group to be able to change files and connect to admin shares:
A reboot will be required after making these changes.
- 31
3
votes
Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?
In addition to the other settings mentioned, make sure the bottom Prompts are set in your Group Policy Object for standard users to install local printers without UAC prompts triggering.
User ...
- 1,354
2
votes
Windows Explorer and UAC: run elevated
This was frustrating for me as well until I studied up on why UAC interrupts my traversal of folders that I have inherent access to as an administrator. There is a solution:
Leave UAC on
In your ...
- 3,459
2
votes
Windows folder permissions, Administrators and UAC, what's the "right" way to deal with this?
Grant Read/Execute permission at the drive root the built-in principal called "Interactive". Then no change to UAC is required.
This way people logged into the desktop remotely or "locally" (VM ...
- 31
2
votes
Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)
There actually IS a safe way around this prompt for administrative users who are logged on locally.
Open the Properties > Security dialog of the folder in question to edit its ACL.
Then add the ...
- 3,459
2
votes
Accepted
UAC - When set to "Never notify" do I still have a dual token?
This isn't a healthy attitude to have, in my opinion. Even experts make mistakes. Also, there are thousands of server admins in the world who I wouldn't exactly call "experts." You don't hear many *...
- 55.7k
2
votes
Accepted
UAC turns off on Windows 10 when log in to the AD domain
https://technet.microsoft.com/en-us/library/dd835564%28v=ws.10%29.aspx
Enable the GPO where the Registry Key is "EnableLua"
to only use this for Windows 10, add the following wmi filter to your GPO ...
- 785
2
votes
Accepted
How can I block the group policy from disabling uac?
Group policies are there so that users can't randomly change things themselves.
The problem with UAC is that changes are only applied when you reboot your pc and then the Group Policy applies again ...
- 86
2
votes
Users get UAC when installing shared print drivers through web interface
From Microsoft:
You can use the Point and Print Restrictions Group Policy setting to control how users can install printer drivers from print servers.
That of course has no bearing on users ...
- 110k
2
votes
Permission issues with administrator account on Windows Server 2012 R2 -- cannot create new files and need elevated privileges to edit files
Found the problem.
For reasons beyond my understanding at the moment, even though UAC slider was at the very bottom, there is a registry entry tied to UAC that was still set to 1. It should be set to ...
- 161
2
votes
How does Windows establish whether application makes changes to device
which are the characteristics that are detected by Windows in order to decide to trigger UAC
Attempting to access a resource that the account's standard user token does not have permission to access.
...
- 36.3k
2
votes
You don't currently have permission to access this folder. Windows 10 User Authentication Error Dialog Box
This is caused by User Account Control, which strips you of administrative privileges to protect you from hurting yourself; as you have seen, this can get quite annoying when you are actually trying ...
- 70.7k
1
vote
How do I start an elevated process with schtasks.exe?
The option you are looking for is /RL:
/RL level Sets the Run Level for the job. Valid values are
LIMITED and HIGHEST. The default is LIMITED.
The documentation ...
- 70.7k
1
vote
In what ways can access token update be triggered for administrator accounts on workstations?
You could consider using the Protected Users capability of Windows (as discussed in this answer) to prevent caching of admin credentials at all. This helps mitigate lateral movement risks, too.
- 648
1
vote
Accepted
Windows - Fine-grained administrator permissions
The UAC prompt is an all-or-nothing proposition, you either allow the program administrator access or don't run it at all.
That doesn't necessarily mean that you can't achieve your goals in other ...
- 6,025
1
vote
Access Controls on Files, Folders, and Other System Objects in Windows Server
First, an assumption. If the app does not have write access to this folder, it will close.
This means that you have write access to that folder, and the other users don't. Probably because you ...
- 23.1k
1
vote
Windows Administrators cannot write files
You need to permission folders with a group that the required accounts are a member of that is not protected/subject to User Account Control.
- 36.3k
1
vote
Task manager requiring elevation for regular users in Windows 10
Finally I have found the solution to this. Props go to a reddit post.
The issue is with the group policy "load and unload device drivers". Computer configuration -> Policies -> windows settings -> ...
- 21
1
vote
Task manager requiring elevation for regular users in Windows 10
Run this, and logoff/on
setx.exe __COMPAT_LAYER runAsInvoker
If you have Admin rights and run this then some commands [e.g. gpedit.msc] will no longer auto-elevate and you will need to "Run as ...
- 11
1
vote
List of Privileges Considered for Standard User As "Additional Privileges" for Windows UAC
According to this TechNet article by Mark Russinovich, Security: Inside Windows Vista User Account Control, the list of additional privileges is:
Built-In Administrators
Certificate Administrators
...
- 324
1
vote
Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)
TL;DR: Create another group in parallel with the local Administrators group and add everyone authorized to be an Administrator to both groups. Then, allow that second group to be in the ACL for all ...
1
vote
Windows Explorer and UAC: run elevated
I ran into this issue RDPing into servers to do stuff on them.
For me it is a case of don't do that. I can access the files from explorer on my home system and it gives me full access.
\\remote.com\...
- 11
1
vote
Windows Explorer and UAC: run elevated
Use an elevated PowerShell ISE instance. The File dialog it provides is itself elevated, giving you the ability to traverse directories.
- 111
Only top scored, non community-wiki answers of a minimum length are eligible