I need to run a program as a different user + make it run with admin privileges (Run as administrator).
I use the ‘runas‘ for running the program as a different user
How can I run the program as admin with that command? (or a different one so will give me my requirements)
EDIT :
I need 2 things
- Run as a different user
- Run as admin – not just as the admin user but also with full permissions
As this image
Solution:
runas
does not elevate a program. Starting with Vista, processes are no longer giving admin privileges just because the user has admin credentials. This is because of UAC.
When Vista and Server 2008 came out, this was especially a pain point for system admins because you could not launch programs with admin privileges from a script.
To elevate(the proper term for this process) a program from the commandline, you can do a few ways.
If you just need to elevate one command, you can type it into the start menu and hit CTRL Shift Enter.
If you need to elevate commands from a batchfile, you’ll need to covert the script to a VBScript or JScript file. Or just download the excellent Elevate powertoys.
Edit:
For more clarification: http://technet.microsoft.com/en-us/magazine/2008.06.elevation.aspx
The runas command-line tool, however, still exists in Windows Vista. Unfortunately, it cannot be used for the most common dual account tasks—running Microsoft® Management Console (MMC) snap-ins.
. . .
runas /user:mydomainadmin “mmc.exe %windir%system32dsa.msc”
Unfortunately, this does not cause ADU&C to launch. Instead, you receive a runas error that says “The requested operation requires elevation.” What is happening in this case is that the MMC executable is marked to run at the highestAvailable privilege level. Since the highestAvailable level for your network administration account is as administrator, launching ADU&C in this manner would require elevation. Since runas does not cause a prompt for elevation, the error occurs.
UAC documentations:
http://technet.microsoft.com/en-US/library/cc753413.aspx
When an administrator logs on to a computer running this version of Windows, the user is assigned two separate access tokens. Windows uses access tokens, which contain a user’s group membership, authorization data, and access control data, to control what resources and tasks the user can access. In some previous versions of Windows such as Windows XP, an administrator account received one access token, which included data to grant the user access to all Windows resources.