Author: AndyA
Subject: PsExec to launch admin-level task from LU account
Posted: 30 March 2014 at 11:40am
I revised my strategy for running programs locally as an admin from an LU account under Windows 7.
RunAsRob worked correctly, but it installs a service.
Instead, I use a script that works in XP/Vista/7/8 for both Admin and LU (Normal User) accounts that allows VBS scripts and other executables (with or without an argument) to be launched without entering a password. If UAC is configured, a simple UAC prompt will need to be acknowledged.
The script uses CPAU.EXE and Microsoft's own ELEVATE.VBS/ELEVATE.CMD.
RUNAS.EXE /savecred can be used instead of CPAU.EXE, but a black screen briefly appears when RUNAS.EXE is launched. CPAU.EXE can be invoked with the -hide parameter so that only the target executable's window is viewed.
FYI, there are two third party alternatives to ELEVATE.VBS/ELEVATE.CMD:
ELEVATE.EXE by Johannes Passing and ELEVATE.EXE by John Robbins
Unless a question is posted here, I will not add to this topic.
regards, AndyA
Subject: PsExec to launch admin-level task from LU account
Posted: 30 March 2014 at 11:40am
I revised my strategy for running programs locally as an admin from an LU account under Windows 7.
RunAsRob worked correctly, but it installs a service.
Instead, I use a script that works in XP/Vista/7/8 for both Admin and LU (Normal User) accounts that allows VBS scripts and other executables (with or without an argument) to be launched without entering a password. If UAC is configured, a simple UAC prompt will need to be acknowledged.
The script uses CPAU.EXE and Microsoft's own ELEVATE.VBS/ELEVATE.CMD.
RUNAS.EXE /savecred can be used instead of CPAU.EXE, but a black screen briefly appears when RUNAS.EXE is launched. CPAU.EXE can be invoked with the -hide parameter so that only the target executable's window is viewed.
FYI, there are two third party alternatives to ELEVATE.VBS/ELEVATE.CMD:
ELEVATE.EXE by Johannes Passing and ELEVATE.EXE by John Robbins
Unless a question is posted here, I will not add to this topic.
regards, AndyA