Elevation to Administrator

I have three questions regarding elevation:

a. How do I do it on the command line for a particular program other than
elevating the whole command shell?

b. When I right click, some programs have Run as administrator but some
not. How do I get those with not to have that option?

c. What's the difference between a user in the Administrator group running
as administrator and when not running as administrator? What is the list of
rights when running as administrator and an administrator not running as
administrator? Where is the documentation for this?

Thanks.

> a. How do I do it on the command line for a particular program other than
> elevating the whole command shell?

You need something like my elevate tool:
http://msinfluentials.com/blogs/jesp...rity-book.aspx

> b. When I right click, some programs have Run as administrator but some
> not. How do I get those with not to have that option?

You can't. At least not easily. They are designed specifically to prevent
elevation. You can try elevating them with elevate.exe, but it is not
guaranteed to work properly. For example, you cannot elevate explorer.exe
that way.

> c. What's the difference between a user in the Administrator group running
> as administrator and when not running as administrator? What is the list of
> rights when running as administrator and an administrator not running as
> administrator? Where is the documentation for this?

When you are running under UAC a number of privileges are stripped,
including all the ones that are considered sensitive. In addition, the
Administrators SID in your token is set to deny only. There is complete
documentation on this in the Vista Security book in my signature.


---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/047...otectyourwi-20

[cwg1960]

Quote:

Originally Posted by Jesper

> a. How do I do it on the command line for a particular program other than
> elevating the whole command shell?

You need something like my elevate tool:
Downloads from the Vista Security Book - Jesper's Blog

> b. When I right click, some programs have Run as administrator but some
> not. How do I get those with not to have that option?

You can't. At least not easily. They are designed specifically to prevent
elevation. You can try elevating them with elevate.exe, but it is not
guaranteed to work properly. For example, you cannot elevate explorer.exe
that way.

> c. What's the difference between a user in the Administrator group running
> as administrator and when not running as administrator? What is the list of
> rights when running as administrator and an administrator not running as
> administrator? Where is the documentation for this?

When you are running under UAC a number of privileges are stripped,
including all the ones that are considered sensitive. In addition, the
Administrators SID in your token is set to deny only. There is complete
documentation on this in the Vista Security book in my signature.


---
Your question may already be answered in Windows Vista Security:
Amazon.com: Windows Vista Security: Securing Vista Against Malicious Attacks: Roger A. Grimes, Jesper M. Johansson: Books

From the cmd console just type this: cd c:\windows\system32\ ; This will elevate you

leech post

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"cwg1960" <cwg1960.3kq9o9@no-mx.forums.vistaheads.com> wrote in message
news:cwg1960.3kq9o9@no-mx.forums.vistaheads.com...
>
> Jesper;703641 Wrote:
>> > a. How do I do it on the command line for a particular program other
>> than
>> > elevating the whole command shell?
>>
>> You need something like my elevate tool:
>> 'Downloads from the Vista Security Book - Jesper's Blog'
>> (http://tinyurl.com/8t8swn)
>>
>> > b. When I right click, some programs have Run as administrator but
>> some
>> > not. How do I get those with not to have that option?
>>
>> You can't. At least not easily. They are designed specifically to
>> prevent
>> elevation. You can try elevating them with elevate.exe, but it is not
>> guaranteed to work properly. For example, you cannot elevate
>> explorer.exe
>> that way.
>>
>> > c. What's the difference between a user in the Administrator group
>> running
>> > as administrator and when not running as administrator? What is the
>> list of
>> > rights when running as administrator and an administrator not running
>> as
>> > administrator? Where is the documentation for this?
>>
>> When you are running under UAC a number of privileges are stripped,
>> including all the ones that are considered sensitive. In addition, the
>> Administrators SID in your token is set to deny only. There is complete
>> documentation on this in the Vista Security book in my signature.
>>
>>
>> ---
>> Your question may already be answered in Windows Vista Security:
>> 'Amazon.com: Windows Vista Security: Securing Vista Against Malicious
>> Attacks: Roger A. Grimes, Jesper M. Johansson: Books'
>> (http://tinyurl.com/5frxyh)
>
> From the cmd console just type this: cd c:\windows\system32\ ;
> This will elevate you
>
>
> --
> cwg1960
> Posted via http://www.vistaheads.com
>