Running with Administrator Privileges

The first step in establishing which type of account your application needs to run under is to examine what resources the application will use and what privileged APIs it will call. You may find that the application, or large parts of it, do not require administrator privileges. Writing Secure Code, by MichaelВ Howard and DavidВ LeBlanc offers an excellent description of how to carry out this assessment and is highly recommended. (This resource may not be available in some languages and countries.)

You can provide the privileges your application needs with less exposure to malicious attack by using one of the following approaches:

• Run under an account with less privilege. One way to do this is to use PrivilegeCheck to determine what privileges are enabled in a token. If the available privileges are not adequate for the current operation, you can disable that code and ask the user to logon to an account with administrator privileges.
• Break into a separate application functions that require administrator permissions. You can provide for the user a shortcut that executes the RunAs command. For detailed instructions on how to set up the shortcut, search for «runas» in Help. Programmatically, you can configure the RunAs command under the AppId Key registry key for your application.
• Authenticate the user by calling CredUIPromptForCredentials (GUI) or CredUICmdLinePromptForCredentials (command line) to obtain user name and password. For an example, see Asking the User for Credentials.
• Impersonate the user. A process that starts under a highly privileged account like System can impersonate a user account by calling ImpersonateLoggedOnUser or similar Impersonate functions, thus reducing privilege level. However, if a call to RevertToSelf is injected into the thread, the process returns to the original System privileges.

If you have determined that your application must run under an account with administrator privileges and that an administrator password must be stored in the software system, see Handling Passwords for methods of doing this safely.

Stop CMD from always opening with administrator privileges

No matter how I open it, cmd.exe always opens with admin privileges. How can I open it without? Is there some registry setting missing? Even if I open it directly from the run dialog or by double clicking in the system32 folder it still opens with admin privs.

6 Answers 6

Found out I was missing a registry key. In HKEY_CLASSES_ROOT\Directory\shell\cmd I was missing the String Value «Extended». Added this back in and restarted the machine got rid of the defaulting to admin privileges.

EDIT: I had UAC turned off for my profile (to stop incessant «are you sure you want to open this .exe» warnings), and turning that back on has stopped cmd always running with greater privileges.

After some unclear actions (switch UAC on/off ?) I ended up in the same situation as described above:

Cmd.exe always starts in Adminstration mode.

Linking in VS failed with the message: Project : error PRJ0003 : Error spawning ‘C:\windows\system32\cmd.exe’.

The Properties | Compatibility tab is greyed out, so switching this off seems impossible (Compatibility modes cannot be set on this program because it is part of this version of Windows).

To recover from this situation you have to edit the registry to remove the RUNASADMIN preferences that is associated with cmd.exe.

The ‘RUNASADMIN’ preference is stored in these registry keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

Delete the values named c:\windows\system32\cmd.exe and you are back in business !

Right click on the cmd.exe, select properties and check the compatibility tab. Is the Run this program as an administrator checkbox checked?

This is only happening because you’re logged in as a user with administrative privileges.

Since doing so defeats the entire Windows security model, you shouldn’t be doing that in the first place. Create a standard user account and log in with that, instead. The command prompt should then not open with administrative privileges since you don’t have administrative privileges.

If, as a standard user, you need to open a command prompt with administrative privileges, you’ll need to right-click on the shortcut and select the «Run as Administrator» option (just look for the UAC shield). You’ll need to provide sufficient credentials to authenticate yourself as an administrator, and then you’ll have the authority to wreak whatever havoc you wish.

How to run cmd with Admin privileges using command line

Is there a way to run/start cmd as administrator through the command line or a batch file programming in Windows 8?

I want to create a batch file which has administrative privileges without any prompt to the user.

4 Answers 4

For example, the administrator account is “AAA” and you want to run BBB.exe of C:\programs, you should follow these steps:

1. Press Win key & R
2. Input “CMD” in open box and click “OK”
3. Input: runas /profile /user:AAA “C:\programs\BBB.exe” and press “Enter”
4. Input the password of administrator AAA
5. Press “Enter”

You can use runas.exe /savecred /user:administrator cmd or refer this link

You can download already created portable and clean (generated in the Windows XP ) shortcut files set: https://sourceforge.net/p/contools/contools/HEAD/tree/trunk/Scripts/Tools/ToolAdaptors/lnk/

Each lnk file just a link to the cmd.exe , so you can pass here all the cmd.exe command line options.

Pros:

• You don’t need a localized version of Administrator account name like for the runas method.

How to Run Command Prompt as Administrator

How to Run Command Prompt as Administrator

In Windows XP, Windows Vista, Windows 7, Windows 8

Question

I would like to know how to Run “Command Prompt” in administrator mode (Administrative Privileges), I need to run a command in that mode.

Solved Answer

That is a very simple process. This post will explain you how to start “Command Prompt” with Administrative Privileges, Please follow below steps.

There are lots of conditions that you require to use the command line rather than the normal mode command lines need admin privilege to do complete some of commands. And others unique command lines that needs admin privilege require a Command Prompt screen which is runs as local administrator. As well as here are a couple methods to open a Command Prompt screen with admin privilege in Windows 8, Vista, Windows 7.

This solution will works for Windows xp, Windows vista, Windows 7, Windows 8, Windows Server 2003, Windows server 2008.

Steps

For Windows 7, Vista

1. Click on Start

2. Go to All Programs ( in XP go to Programs)

3. Click on Accessories

4. Under Accessories you will get “Command Prompt”, Right click on that and choose option “Run as Administrator”

For Windows 8, 8.1, 10

• Open the Charms bar, and click on Search (You can also press the Windows + Q to open Search.)
• Then Type in the search bar “command prompt”
• Then click on “command prompt” (which is found in search results)
• Once you click on “command prompt” there are four option will be Highlighted in the bottom
• Choose the option “Run as Administrator” from the options

Windows 7 and Windows Vista users have lots of methods to start a command prompt or Windows command processor (co) with administrator privileges, proper rights or credentials. It is an security function in Windows Vista and Windows 7 that provide User Access Control that every one processes will start in restricted mode except if users particularly accept the level confirmation. To get command prompt, the commands may won’t run and have access denied error. Therefore users have to start command prompt will certainly full admin privileges and permission condition. Here’s several methods the raised command prompt could be started out and ran as administrator.

So that you can start a raised Command Prompt screen, whether) the Windows user account must curently have administrator rights, you need to know the password to a different account on the pc which has administrator rights. Most home pc user’s accounts are set up as administrator accounts.

If windows vista, every program completes with restricted rights to result in lots of restriction for a few basic programs. If you type cmd.exe inside the start menu search box it’ll load with a bit of limitations.

Related Search

The problem with the Normal Command Prompt is that any commands you run in it, if you do not have Administrative privileges, If your user account is a member of the Administrators then command prompt as administrator rights

I’ve been doing lots of work on it but running command prompt as administrator For example, when you run the sfc command in a normal Command Prompt window it will not completed, If you enjoy using the command line with admin rights administrator command prompt vista This is the very simple way to start command line administrator cmd prompt command prompt login as administrator

There more many ways but this is simple command prompt with administrative privileges If you getting error message 5 then you have to run command prompt administrator access if you want to know How to open command prompt with admin rights this type of problem are basic problem to run a command prompt as an administrator windows 7 command prompt administrator In this Instructable you will learn how to unblock cmd open command prompt as administrator How to Add an “Open Command Prompt
start command prompt as administrator

if you ran command prompt as a user that is a part of the Administrator’s windows 7 command prompt help User Account Control in Vista Command line on windows if you have Vista’s User Account Control turned on, you may need to start the Command Prompt windows 8 command prompt commands cmd administrator command command prompt login as administrator Different Ways to Open Command Prompt as Administrator cmd as administrator vista get command prompt run as administrator from command prompt can t open command prompt windows 7 running command prompt as administrator, open command prompt as administrator, start command prompt as administrator, running command prompt as administrator, administrator cmd prompt, administrative command prompt

How to view user privileges using windows cmd?

I am trying to view the user privileges using the command prompt in Windows. User account & User privileges such as:

I tried using ntrights but it’s not working. I can’t use any tool as I am trying to create an automated script for an OS audit.

6 Answers 6

Then examine the line for the relevant privilege. However, the problem now is that the accounts are listed as SIDs, not usernames.

You can use the following commands:

For more information, check whoami @ technet.

Mark Russinovich wrote a terrific tool called AccessChk that lets you get this information from the command line. No installation is necessary.

Returns this for me:

By contrast, whoami /priv and whoami /all were missing some entries for me, like SeServiceLogonRight .

Go to command prompt and enter the command,

Will show your local group memberships.

If you’re on a domain, use localgroup instead:

Check the list of local groups with localgroup on its own.

Use whoami /priv command to list all the user privileges.

For Windows Server® 2008, Windows 7, Windows Server 2003, Windows Vista®, or Windows XP run «control userpasswords2»

Click the Start button, then click Run (Windows XP, Server 2003 or below)

Type control userpasswords2 and press Enter on your keyboard.

Note: For Windows 7 and Windows Vista, this command will not run by typing it in the Serach box on the Start Menu — it must be run using the Run option. To add the Run command to your Start menu, right-click on it and choose the option to customize it, then go to the Advanced options. Check to option to add the Run command.