Hot answers tagged privileges
18
.msi files can be executed with msiexec.exe, so in combination with the runas command, you could accomplish what your want:
runas /user:administrator "msiexec /i <path and filename of your msi>"
As a full-path to the file is recommended, it might need quotes around it and you need to escape them then with a backslash \:
runas /user:administrator ...
16
In Process Explorer, double click the process to open its properties. Go to the Security tab. In the group listing, find BUILTIN\Administrators and look at what it says in the Flags column.
Deny = Not Elevated (not admin)
Owner = Elevated (is admin)
11
Try explicitly running the cmd shell as administrator. If that doesn't help, then try the runas command.
runas /user:administrator "mklink args"
Quotes around the mklink command and its args are required.
11
You don't give your distribution, but since you aren't installing as root it's probably not important. (The binaries are meant to be installed system-wide, so unless you can convince your system administrator to install the package, you'll need to compile and install to your home directory.)
Essentially, Dropbox's Linux client is two parts: a daemon, ...
11
In Process Explorer you can change the columns displayed and add the "Integrity level" column:
This is apparently the technical term for what is changed when you run a process with administrator privileges. If you run Process Explorer as an Administrator it will show ordinary processes as 'medium' integrity level and elevated processes as 'high'.
Note ...
10
If the process is running with root-privileges, you could attach gdb to the process and call seteuid from within that process.
Example:
[root@user-desktop ~]# id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) context=user_u:system_r:unconfined_t
[root@user-desktop ~]# gdb /bin/bash $$
GNU gdb Fedora (6.8-27.el5)
# ...
9
Probably that is not a problem of file permissions but it's related with:
Network shares being associated with sessions (i.e. different users may have a different set of network shares). Note that an user can have more that one session.
How User Account Control works.
Since almost all users used an administrator account in XP (as most programmers didn't ...
9
On Windows 7 (as well as Vista), an administrator account does not necessarily run a program with administrator priveleges. As an administrator, you have the credentials to perform administrator functions (creating/modifying user permissions being one of them, etc.). However programs are still run in a secured mode, in which they are prevented from doing ...
7
Yes.
Turn UAC back on!
Technically, the program will still run under the context of your account, but UAC will prevent system wide changes without authentication first.
The only other option is to create shortcuts and then right click, and choose Run as different user then choose an account which does not have administration rights.
7
Well, let me answer one part of your broader question first: how to do it. My immediate experience is on Linux, but you said that answers on any platform were welcome, so here goes. If you were on Linux, you could probably require root access to access your cookies in any way other than (in principle) deleting them. The general procedure would look like ...
7
This article covers quite a few options of how to do this. Among them are:
Using BeyondTrust in the Enterprise
Use Task Manager to launch startup applications
Use the Application Toolkit to disable UAC for selected application
Switch off UAC (Not Recommended / Bad Practice)
The option to Always run as administrator available when Right Clicking and going ...
7
There are a few ways to do this. Ubuntu's graphical login is provided by GDM (or KDM if you're using Kubuntu). GDM is started by the Upstart subsystem.
The startup process follows these steps:
System boots. Upstart starts services, including GDM (/etc/init/gdm).
GDM starts, initializes the X-server (/etc/gdm/Init/*), and presents the GUI login window.
...
7
To check:
ls -l /path/to/folder/or/file
or for more verbose output:
stat /path/to/folder/or/file
To change owner:
chown someuser:somegroup /path/to/folder/or/file
To change permissions:
chmod 755 /path/to/folder/or/file
man chown and man chmod will give you explanation about the various options.
Or, if you are using some graphical ...
7
You need to install .net 3.5
(Even if you have .net 4+ installed)
You do this through the Server Manager:
Configure local server
Add roles and features
Click next until you get to the features section
Check the .net 3.5 check box (I also checked the sub items for good measure)
If you get a warning about needing to Specify an alternate path, then:
...
6
This is a terrible idea. You want to go back to the Win XP days where everything runs as Administrator? You're giving up all the security gains made by Vista and Windows 7. GUI applications should all invoke UAC, so there's no need for this hack in that case.
If you need to run command line apps as administrator, simply open an administrator command ...
6
As far as I know you can't create an account like this, but if you log in as "Administrator" (Not merely as an account that is a member of the Administrators group - that's not good enough.) then everything you launch will be launched elevated.
Not something you should do normally, but if you need to then you need to.
6
It looks like this utility - Hidden Start - will do what you wish if you use the /uac switch. Here's an example command line:
hstart /UAC "notepad.exe"
This will pop up the UAC dialog rather than ask for a password like runas does.
6
You don't need to run explorer.exe as a different user just to connect to a network share with different credentials.
In an explorer window you can click on "Map network drive", fill in the path and and make sure to check "Connect using different credentials". When you click the finish button you will get prompted for the credentials you want to use to ...
5
sudo always requires the executing user's password (and requires that you have specific permissions to do this, i.e. are one of the sudoers).
su requires the password of the target account (root by default, but root account has no password on OS X by default). If you use su instead, you can enter the destination account's password and execute a command ...
5
Under XP, the privileges given to applications you launched were the same as those you would get interacting directly with the OS. Under Vista and 7, they're not - unless you deliberately choose to use your powers by elevating the application; choosing Run as Administrator is one way to elevate an application. (Some apps are marked as only making sense when ...
5
There may be a better way to do this, but:
Create an administrator account dedicated for this purpose
-> Users can now right click and do "Run As"
Apply group policy for that administrator account so they can only run the processes required
You may also want to add the administrator account to "Deny Login Locally" and "Deny Login Remotely", so they can't ...
5
The simplest and best way to do this is to set your application to be started when you log in, with Task Scheduler (Start search, or Administrative Tools -> Task Scheduler).
Check the "Run with highest privileges" box on the General tab.
On the Triggers tab, create a new trigger for when you log in.
On the Actions tab, create a new action to start ...
5
The installation of Silverlight itself requires admin privileges, so even if there was an .xpi installer it wouldn't really help.
Note that you must have sufficient administrative privileges to install Silverlight.
4
If you type
cmd
into the search box after clickining on the Windows Orb, right click on the program and select
Run as Administrator
It will prompt you for the admin password and then start the command processor as admin and in the c:\windows\system32 directory
4
You can always open a command prompt as an administrator (either right-click runas or start->run->runas /user:administrator cmd), change to the directory where your MSI exists, and execute msiexec /i product.msi
Or add this to your register:
HKEY_CLASSES_ROOT\Msi.Package\shell\runas\command
Values: Install &as...
...
4
When you want to authenticate to the local computer, you can use a dot instead of the hostname. This doesn't make the issue go away entirely, but at least it prevents you from having to look up hostnames since . works everywhere.
Username: .\Administrator
Password: *******
In certain contexts, localhost will work instead. I haven't yet found a situation ...
4
Its a Huge security hole to run everything as Administrator, you can do it but it will allow malware, viruses, worms etc, to do Anything it wants.
You should always install Software as administrator in Windows 7, this sets permissions for that program to write to sensitive areas, uninstall the software, reinstall it by right clicking on it and select "run ...
4
So did I get that right.
User "bla" wants to run a command as User "blub" ?
Then something like this could work:
sudo -u blub /path/to/command
If you need this to be done without being asked for a password add the follwing line to /etc/sudoers (via visudo command):
bla ALL=(blub) NOPASSWD: /path/to/command
3
you can work with SUID and SGID bit permissions (note that this may be really dangerous)
give the permissions to execute this file to a group that the user you are executing the script as belong to, and set via SUID anyone who runs this script to run it as the user who owns the script
sudo chmod 4751 /path/to/my/file
sudo chgrp somegroup /path/to/my/file
...
3
Are any/all attempts to access a log file(text) logged somewhere ?
The Windows Event Logs are the place to see everything that is logged.
Control Panel\Administrative Tools\Event Viewer
is where you go to see them. Unfortunately, only parts of these are view-able without admin privileges.
Of course, specific applications may choose not to use the event ...
Only top voted, non community-wiki answers of a minimum length are eligible
