> a. How do I do it on the command line for a particular program other than
> elevating the whole command shell?
You need something like my elevate tool:
> b. When I right click, some programs have Run as administrator but some
> not. How do I get those with not to have that option?
You can't. At least not easily. They are designed specifically to prevent
elevation. You can try elevating them with elevate.exe, but it is not
guaranteed to work properly. For example, you cannot elevate explorer.exe
> c. What's the difference between a user in the Administrator group running
> as administrator and when not running as administrator? What is the list of
> rights when running as administrator and an administrator not running as
> administrator? Where is the documentation for this?
When you are running under UAC a number of privileges are stripped,
including all the ones that are considered sensitive. In addition, the
Administrators SID in your token is set to deny only. There is complete
documentation on this in the Vista Security book in my signature.
Your question may already be answered in Windows Vista Security: