1

I have a very-bad-developed software that needs admin privileges to run. This because changes some global files under "c:\program files\app directory". I can grant all users to write into this directory but I don't want to let them install other software and change windows options and so on.

Is is possibile to mislead this app to let its belive that it is running as admin?

1
  • Is possible to mislead this app to let its believe that it is running as admin? - NO it isn't. If you want a process to have its permissions escalated the only way to do that is to provide the authentication information of a user that does at the point of escalation.
    – Ramhound
    Apr 20, 2015 at 10:55

3 Answers 3

1

You can use RunAsSpc application. It can do what you want.

Get it from here: http://www.robotronic.de/runasspcEn.html

1
  • Nice. Didn't know this exists.
    – LPChip
    Apr 20, 2015 at 11:17
0

There is always an administrator account on Windows 7 hidden/ disabled by default.

Just run your program by right-clicking the executable file and chose "run as administrator".

This should solve your problem.

1
  • This doesn't solve my problem to avoid the users uncontrolled installation of software with this admin account.
    – Tobia
    Apr 20, 2015 at 9:46
0

The Microsoft Application Compatibility Toolkit (ACT) can fix this. No matter what you do, you will need to grant ordinary users read/write access to C:\Program Files\App Directory, but this program is improperly prompting for elevation when it doesn't need to.

This link provides a very good write-up on how to do this. In short:

  1. Download the ACT from Microsoft
  2. Using the Compatibility Administrator, create a new application fix, point it to the path of the .exe, and choose the RunAsInvoker compatibility flag. Then save the file out to a security database (.sdb) file.
  3. Using the sdbinst command, install the .sdb file. This will whitelist the application and prevent a UAC prompt from appearing.

Note that if the application does any admin-like actions other than writing to C:\Program Files (like modifying reg keys under HKLM for example), you will need to give unprivileged users read/write access to those as well.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .