Guest Bill Clinton Posted February 28, 2008 Posted February 28, 2008 I have three questions regarding elevation: a. How do I do it on the command line for a particular program other than elevating the whole command shell? b. When I right click, some programs have Run as administrator but some not. How do I get those with not to have that option? c. What's the difference between a user in the Administrator group running as administrator and when not running as administrator? What is the list of rights when running as administrator and an administrator not running as administrator? Where is the documentation for this? Thanks. Quote
Guest Jesper Posted February 28, 2008 Posted February 28, 2008 > a. How do I do it on the command line for a particular program other than <span style="color:blue"> > elevating the whole command shell?</span> You need something like my elevate tool: http://msinfluentials.com/blogs/jesper/arc...urity-book.aspx <span style="color:blue"> > b. When I right click, some programs have Run as administrator but some > not. How do I get those with not to have that option?</span> You can't. At least not easily. They are designed specifically to prevent elevation. You can try elevating them with elevate.exe, but it is not guaranteed to work properly. For example, you cannot elevate explorer.exe that way. <span style="color:blue"> > c. What's the difference between a user in the Administrator group running > as administrator and when not running as administrator? What is the list of > rights when running as administrator and an administrator not running as > administrator? Where is the documentation for this?</span> When you are running under UAC a number of privileges are stripped, including all the ones that are considered sensitive. In addition, the Administrators SID in your token is set to deny only. There is complete documentation on this in the Vista Security book in my signature. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047010155...rotectyourwi-20 Quote
Guest cwg1960 Posted December 20, 2008 Posted December 20, 2008 Jesper;703641 Wrote: <span style="color:blue"><span style="color:green"> > > a. How do I do it on the command line for a particular program other</span> > than<span style="color:green"> > > elevating the whole command shell?</span> > > You need something like my elevate tool: > 'Downloads from the Vista Security Book - Jesper's Blog' > (http://tinyurl.com/8t8swn) > <span style="color:green"> > > b. When I right click, some programs have Run as administrator but</span> > some<span style="color:green"> > > not. How do I get those with not to have that option?</span> > > You can't. At least not easily. They are designed specifically to > prevent > elevation. You can try elevating them with elevate.exe, but it is not > guaranteed to work properly. For example, you cannot elevate > explorer.exe > that way. > <span style="color:green"> > > c. What's the difference between a user in the Administrator group</span> > running<span style="color:green"> > > as administrator and when not running as administrator? What is the</span> > list of<span style="color:green"> > > rights when running as administrator and an administrator not running</span> > as<span style="color:green"> > > administrator? Where is the documentation for this?</span> > > When you are running under UAC a number of privileges are stripped, > including all the ones that are considered sensitive. In addition, the > Administrators SID in your token is set to deny only. There is complete > documentation on this in the Vista Security book in my signature. > > > --- > Your question may already be answered in Windows Vista Security: > 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious > Attacks: Roger A. Grimes, Jesper M. Johansson: Books' > (http://tinyurl.com/5frxyh)</span> From the cmd console just type this: cd c:\windows\system32\ ; This will elevate you -- cwg1960 Posted via http://www.vistaheads.com Quote
Guest Peter Foldes Posted December 21, 2008 Posted December 21, 2008 leech post -- Peter Please Reply to Newsgroup for the benefit of others Requests for assistance by email can not and will not be acknowledged. "cwg1960" <cwg1960.3kq9o9@no-mx.forums.vistaheads.com> wrote in message news:cwg1960.3kq9o9@no-mx.forums.vistaheads.com...<span style="color:blue"> > > Jesper;703641 Wrote:<span style="color:green"><span style="color:darkred"> >> > a. How do I do it on the command line for a particular program other</span> >> than<span style="color:darkred"> >> > elevating the whole command shell?</span> >> >> You need something like my elevate tool: >> 'Downloads from the Vista Security Book - Jesper's Blog' >> (http://tinyurl.com/8t8swn) >><span style="color:darkred"> >> > b. When I right click, some programs have Run as administrator but</span> >> some<span style="color:darkred"> >> > not. How do I get those with not to have that option?</span> >> >> You can't. At least not easily. They are designed specifically to >> prevent >> elevation. You can try elevating them with elevate.exe, but it is not >> guaranteed to work properly. For example, you cannot elevate >> explorer.exe >> that way. >><span style="color:darkred"> >> > c. What's the difference between a user in the Administrator group</span> >> running<span style="color:darkred"> >> > as administrator and when not running as administrator? What is the</span> >> list of<span style="color:darkred"> >> > rights when running as administrator and an administrator not running</span> >> as<span style="color:darkred"> >> > administrator? Where is the documentation for this?</span> >> >> When you are running under UAC a number of privileges are stripped, >> including all the ones that are considered sensitive. In addition, the >> Administrators SID in your token is set to deny only. There is complete >> documentation on this in the Vista Security book in my signature. >> >> >> --- >> Your question may already be answered in Windows Vista Security: >> 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious >> Attacks: Roger A. Grimes, Jesper M. Johansson: Books' >> (http://tinyurl.com/5frxyh)</span> > > From the cmd console just type this: cd c:windowssystem32 ; > This will elevate you > > > -- > cwg1960 > Posted via http://www.vistaheads.com > </span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.