-4

Users in my domain are usually standard users, aka do not have Admin rights. However, there is one program that needs to be run as Administrator to function properly. Is it possible to permanently run this application as administrator while keeping everything else non-admin?

Run-as administrator will not work as they will have to provide the admin username and password, which they're not supposed to know. Creating a batch file creates a security hole, as the password is in clear text.

| improve this question | |
  • Also superuser.com/questions/109741/…, superuser.com/questions/242839/…, superuser.com/questions/614709/… fact, it's been asked many, many, many times: superuser.com/search?q=run+program+as+admin – user201262 Dec 23 '13 at 5:05
  • 1
    You're incorrect. I'm getting tired of users NOT reading questions and quickly posting garbage responses. I've been to that answer AND the one it links to. The first has no solutions that are secure enough. The second has no accepted answer, but did have a 3rd party solution. It was something I overlooked before, because I was hoping for a built-in solution. I've been through the rest. None worked. Don't automatically assume a person hasn't done his share of searching. – Brendan Long Dec 23 '13 at 5:42
  • 2
    The short answer is no: you're trying to put a Windows-shaped peg into a UNIX-shaped hole. Strictly, being an Administrator doesn't mean anything except "You are in the Administrators security group"; in itself that doesn't grant a user rights. It's tiresome and it's why we hate windows, but if the program demands it you have three choices: 1. Make them administrators 2. Figure out what it's trying to access that it can't, and using either ACLs or GP making it accessible (some software still won't care, and will demand to be run as an admin) 3. Find another piece of software. – Bandrami Dec 23 '13 at 6:11
  • 1
    @BrendanLong I never suggested you hadn't done any research, I was merely trying to point out the fact that if a suitable answer existed, it would have been posted on those questions. As Bandrami pointed out, the answer is essentially "no". The reason I marked as duplicate is because this question is the same as the others, except with a tag line: "Without run-as admin or batch". That doesn't make it a new question, it makes it a duplicate question with a couple qualifiers. – user201262 Dec 23 '13 at 13:47
  • 4
    @Brendan If you don't share your research, people can't guess which questions you've already seen and what answers you've already dismissed. Please read How to Ask again. Also, you don't mention which OS you're using. – slhck Dec 23 '13 at 15:10
2

Per Redmond:

http://support.microsoft.com/kb/922708

You cannot set UAC to automatically run a program as an administrator without the user being prompted.

Your bug is actually a feature. The user's token or tokens are what they are, and there's no equivalent of setuid that lets a file elevate that.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.