I have inherited a legacy Citrix 6.5 system running on Windows Server 2008. Yes I know this stack isn't for server questions but my feeling is that this workstation question as the server is used for running virtual sessions.
The quirk: PowerShell is launched by a normal user without selecting the administrator option:
It launches and briefly shows just "Windows PowerShell" in the title but then somehow switches to "Administrator: Windows PowerShell":
And the shell really is in administrator mode, i.e. I can create files in the C:\Windows folder, e.g. "Hello, World" > C:\Windows\Test.txt
This is a huge security hole esp. as the server is locked down for users as is common in Citrix environments.
I know about Microsoft.PowerShell_profile.ps1 in the documents folder running when PowerShell launches - that's not there. I've also checked the shortcut to check it's not configured to run as administrator - it's not.
Is there another shared PowerShell script run on start-up for everyone? Like a global start-up script? Anything in the registry that might create this?
It's got me stumped!
May have found it - all users have been added to the local Administrators group.