Elevation to Administrator

Posted: 02-28-2008, 05:45 AM
I have three questions regarding elevation:

a. How do I do it on the command line for a particular program other than
elevating the whole command shell?

b. When I right click, some programs have Run as administrator but some
not. How do I get those with not to have that option?

c. What's the difference between a user in the Administrator group running
as administrator and when not running as administrator? What is the list of
rights when running as administrator and an administrator not running as
administrator? Where is the documentation for this?

Thanks.

Elevation to Administrator


Responses to "Elevation to Administrator"

Jesper
Guest
Posts: n/a
 
RE: Elevation to Administrator
Posted: 02-28-2008, 05:55 AM
> a. How do I do it on the command line for a particular program other than
> elevating the whole command shell?
You need something like my elevate tool:
http://msinfluentials.com/blogs/jesp...rity-book.aspx
> b. When I right click, some programs have Run as administrator but some
> not. How do I get those with not to have that option?
You can't. At least not easily. They are designed specifically to prevent
elevation. You can try elevating them with elevate.exe, but it is not
guaranteed to work properly. For example, you cannot elevate explorer.exe
that way.
> c. What's the difference between a user in the Administrator group running
> as administrator and when not running as administrator? What is the list of
> rights when running as administrator and an administrator not running as
> administrator? Where is the documentation for this?
When you are running under UAC a number of privileges are stripped,
including all the ones that are considered sensitive. In addition, the
Administrators SID in your token is set to deny only. There is complete
documentation on this in the Vista Security book in my signature.


---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20

cwg1960
Guest
Posts: n/a
 
Re: Elevation to Administrator
Posted: 12-20-2008, 05:17 PM

Jesper;703641 Wrote:
> > a. How do I do it on the command line for a particular program other
> than
> > elevating the whole command shell?
>
> You need something like my elevate tool:
> 'Downloads from the Vista Security Book - Jesper's Blog'
> (http://tinyurl.com/8t8swn)
>
> > b. When I right click, some programs have Run as administrator but
> some
> > not. How do I get those with not to have that option?
>
> You can't. At least not easily. They are designed specifically to
> prevent
> elevation. You can try elevating them with elevate.exe, but it is not
> guaranteed to work properly. For example, you cannot elevate
> explorer.exe
> that way.
>
> > c. What's the difference between a user in the Administrator group
> running
> > as administrator and when not running as administrator? What is the
> list of
> > rights when running as administrator and an administrator not running
> as
> > administrator? Where is the documentation for this?
>
> When you are running under UAC a number of privileges are stripped,
> including all the ones that are considered sensitive. In addition, the
> Administrators SID in your token is set to deny only. There is complete
> documentation on this in the Vista Security book in my signature.
>
>
> ---
> Your question may already be answered in Windows Vista Security:
> 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious
> Attacks: Roger A. Grimes, Jesper M. Johansson: Books'
> (http://tinyurl.com/5frxyh)
From the cmd console just type this: cd c:\windows\system32\ ;
This will elevate you


--
cwg1960
Posted via http://www.vistaheads.com

Peter Foldes
Guest
Posts: n/a
 
Re: Elevation to Administrator
Posted: 12-21-2008, 06:29 AM
leech post

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"cwg1960" <cwg1960.3kq9o9@no-mx.forums.vistaheads.com> wrote in message
news:cwg1960.3kq9o9@no-mx.forums.vistaheads.com...
>
> Jesper;703641 Wrote:
>> > a. How do I do it on the command line for a particular program other
>> than
>> > elevating the whole command shell?
>>
>> You need something like my elevate tool:
>> 'Downloads from the Vista Security Book - Jesper's Blog'
>> (http://tinyurl.com/8t8swn)
>>
>> > b. When I right click, some programs have Run as administrator but
>> some
>> > not. How do I get those with not to have that option?
>>
>> You can't. At least not easily. They are designed specifically to
>> prevent
>> elevation. You can try elevating them with elevate.exe, but it is not
>> guaranteed to work properly. For example, you cannot elevate
>> explorer.exe
>> that way.
>>
>> > c. What's the difference between a user in the Administrator group
>> running
>> > as administrator and when not running as administrator? What is the
>> list of
>> > rights when running as administrator and an administrator not running
>> as
>> > administrator? Where is the documentation for this?
>>
>> When you are running under UAC a number of privileges are stripped,
>> including all the ones that are considered sensitive. In addition, the
>> Administrators SID in your token is set to deny only. There is complete
>> documentation on this in the Vista Security book in my signature.
>>
>>
>> ---
>> Your question may already be answered in Windows Vista Security:
>> 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious
>> Attacks: Roger A. Grimes, Jesper M. Johansson: Books'
>> (http://tinyurl.com/5frxyh)
>
> From the cmd console just type this: cd c:\windows\system32\ ;
> This will elevate you
>
>
> --
> cwg1960
> Posted via http://www.vistaheads.com
>
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
disable the UAC elevation prompts Bob Windows Vista File Management 2 12-24-2007 03:25 PM
This Requested Operation Needs Elevation Dana Windows Vista Administration 1 07-13-2007 08:56 AM
Requires Elevation Michael Henderson Windows Vista Networking & Sharing 3 11-25-2006 11:16 AM
How do I explicitly cause a UAC elevation prompt? Kevin Southern Windows Vista Security 2 09-07-2006 08:42 PM
how to get orignal token after Elevation? dispaly name Windows Vista Security 2 07-26-2006 01:09 AM