Welcome to Vista Banter. You are currently viewing our boards as a guest which gives you limited access to view most discussions, articles and access our other FREE features. By joining our free community you will have access to ask questions and reply to others posts, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact contact support. |
|
Security and Windows Vista A forum for discussion on security issues with Windows Vista. (microsoft.public.windows.vista.security) |
|
LinkBack | Thread Tools | Display Modes |
|
|||
Elevation to Administrator
I have three questions regarding elevation:
a. How do I do it on the command line for a particular program other than elevating the whole command shell? b. When I right click, some programs have Run as administrator but some not. How do I get those with not to have that option? c. What's the difference between a user in the Administrator group running as administrator and when not running as administrator? What is the list of rights when running as administrator and an administrator not running as administrator? Where is the documentation for this? Thanks. |
|
|||
Elevation to Administrator
a. How do I do it on the command line for a particular program other than
elevating the whole command shell? You need something like my elevate tool: http://msinfluentials.com/blogs/jesp...rity-book.aspx b. When I right click, some programs have Run as administrator but some not. How do I get those with not to have that option? You can't. At least not easily. They are designed specifically to prevent elevation. You can try elevating them with elevate.exe, but it is not guaranteed to work properly. For example, you cannot elevate explorer.exe that way. c. What's the difference between a user in the Administrator group running as administrator and when not running as administrator? What is the list of rights when running as administrator and an administrator not running as administrator? Where is the documentation for this? When you are running under UAC a number of privileges are stripped, including all the ones that are considered sensitive. In addition, the Administrators SID in your token is set to deny only. There is complete documentation on this in the Vista Security book in my signature. --- Your question may already be answered in Windows Vista Security: http://www.amazon.com/gp/product/047...otectyourwi-20 |
|
|||
Elevation to Administrator
Jesper;703641 Wrote: a. How do I do it on the command line for a particular program other than elevating the whole command shell? You need something like my elevate tool: 'Downloads from the Vista Security Book - Jesper's Blog' (http://tinyurl.com/8t8swn) b. When I right click, some programs have Run as administrator but some not. How do I get those with not to have that option? You can't. At least not easily. They are designed specifically to prevent elevation. You can try elevating them with elevate.exe, but it is not guaranteed to work properly. For example, you cannot elevate explorer.exe that way. c. What's the difference between a user in the Administrator group running as administrator and when not running as administrator? What is the list of rights when running as administrator and an administrator not running as administrator? Where is the documentation for this? When you are running under UAC a number of privileges are stripped, including all the ones that are considered sensitive. In addition, the Administrators SID in your token is set to deny only. There is complete documentation on this in the Vista Security book in my signature. --- Your question may already be answered in Windows Vista Security: 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious Attacks: Roger A. Grimes, Jesper M. Johansson: Books' (http://tinyurl.com/5frxyh) From the cmd console just type this: cd c:\windows\system32\ ; This will elevate you -- cwg1960 Posted via http://www.vistaheads.com |
|
|||
Elevation to Administrator
leech post
-- Peter Please Reply to Newsgroup for the benefit of others Requests for assistance by email can not and will not be acknowledged. "cwg1960" wrote in message ... Jesper;703641 Wrote: a. How do I do it on the command line for a particular program other than elevating the whole command shell? You need something like my elevate tool: 'Downloads from the Vista Security Book - Jesper's Blog' (http://tinyurl.com/8t8swn) b. When I right click, some programs have Run as administrator but some not. How do I get those with not to have that option? You can't. At least not easily. They are designed specifically to prevent elevation. You can try elevating them with elevate.exe, but it is not guaranteed to work properly. For example, you cannot elevate explorer.exe that way. c. What's the difference between a user in the Administrator group running as administrator and when not running as administrator? What is the list of rights when running as administrator and an administrator not running as administrator? Where is the documentation for this? When you are running under UAC a number of privileges are stripped, including all the ones that are considered sensitive. In addition, the Administrators SID in your token is set to deny only. There is complete documentation on this in the Vista Security book in my signature. --- Your question may already be answered in Windows Vista Security: 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious Attacks: Roger A. Grimes, Jesper M. Johansson: Books' (http://tinyurl.com/5frxyh) From the cmd console just type this: cd c:\windows\system32\ ; This will elevate you -- cwg1960 Posted via http://www.vistaheads.com |