Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I can run processes with a specific TrustLevel like this:

RunAs /TrustLevel:0x20000 process.exe

But, how do I find out the TrustLevel of a process that is already running? Is there any app available which can show this info?

share|improve this question

The trustlevel parameter is a legacy thing that is related to software restriction policies (SRP) in Group Policy. It allowed an administrator to run a otherwise blocked program.

SRP used to have three levels: restricted, unrestricted and "default user". The "default user" setting was retired with Windows Vista, so this parameter isn't useful anymore, and there's only one trustlevel available anymore.

Please note that the trustlevel does not relate to UAC integrity levels.

share|improve this answer
I believe that you are wrong. The RunAs tool doesn't show all the available TrustLevels when requested using the ShowTrustLevels argument. There are at least four TrustLevels available in Windows Vista+ : Untrusted = 0x1000, Constrained = 0x10000, NormalUser = 0x20000, FullyTrusted = 0x40000. You can verify this by running any app that shows you whether it has admin rights or not using RunAs and specifying the different TrustLevels I mentioned earlier. – Elmo Jul 22 '13 at 15:06
Check this for more details : . Also programmers can specify 3 TrustLevels in the manifest file: asInvoker, requireAdministrator, highestAvailable – Elmo Jul 22 '13 at 15:08
Sounds like I'm indeed partially wrong - there's no "clear" explanation for the trustlevel parameter. But anyway, I still do believe that it is related (or at least only partially related) to the UAC privilege levels (low, medium, high, system) or the application manifest requestedexecutionlevel. If you want to get the integrity label of a process, you have to enumerate its DACL. – Martin Binder Jul 23 '13 at 8:22
The manifest entry requestedExecutionLevel specifies the Integrity Level the program is to run at. Prior to Windows 8 there were four levels used: System, High, Medium, Low. Process Explorer can be configured to show process integrity level. – David Marshall Jul 28 '13 at 15:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .