We make it easier to run applications in Windows as an administrator without disabling UAC. How to make the program always run as Administrator

Sometimes it is useful for a program to have more rights than others. For example, such programs include those that support your security in the system, in other words, these are all sorts of utilities for checking your computer for viruses.

But what does running as Administrator give? More rights. But the whole point is that viruses can make it so that they will be launched on behalf of the System, then you will not be able to delete them even in the Task Manager, in any way at all, since you simply will not have the rights to do so. And the programs that you run have the same rights as you, which is why in the Task Manager it says that they are running on your behalf (or rather, the user).

What to do? It's very simple, let's imagine that we want the browser Mozilla Firefox always started with extended rights, what should we do? Open the shortcut properties:

Now in this window, go to the Compatibility tab, there will be a checkbox at the bottom about running as Administrator, check it accordingly and click OK:

Now, when you launch Mozilla Firefox, it will always run as Administrator.

But this is just an example; of course, such a feature is of no use for a browser, but for utilities that remove ad viruses, it’s just right. But there is also reverse side, you don’t always need to do this, for example, if you like to play games, then you probably know what trainers are, but under no circumstances should you run them as Administrator, and to be honest, these trainers often contain viruses (however like any keygens). It’s not for nothing that many antiviruses complain about them, saying that they are potentially dangerous software.

How to find programs and features in Windows 10?

Well, I think I also need to write about how to open this window where all the software is installed. Well, that is, the Programs and Features window. I hope this information is useful to someone

So, look, everything is simple here - you need to click on the Start icon right click, there will be a menu, here at the top select Programs and Features:

By the way, this menu can also be called up with the Win + X buttons! So you hold them down and the menu appears!

After this, a window will open with the following list:

You see, all that is here is all your software. I don’t recommend deleting anything here just like that, because these, well, could be serious glitches. Also, if you suddenly are a more or less advanced user, then I advise you to use the removal utility

Good day, dear visitor. In today’s article, I suggest you consider not the usual installation and configuration of servers and client stations from the very beginning, but the ordinary everyday life of a system administrator. We will consider launching a specific application as an administrator, we will look at what solutions exist and how they differ. The reason why administrators encounter this problem is quite simple; in our IT outsourcing practice, we quite often encounter a situation where an application (especially from domestic developers) is not UAC-oriented, and why is this, ask the application developers. We will test in the Hyper-V virtual environment on a second-generation virtual machine running Windows 8.1.

Diversity is present

We will consider three utilities:

RunAs - launches specific means and programs with permissions other than those granted by your current account. This utility is not third-party; it is included with Windows OS. Help for the runas utility /?

We will test using the built-in utility msconfig.exe, which is included in the Windows OS. This utility can only be launched from an account with administrator rights.

ATTENTION! The utility will be launched from a domain administrator account. In reality, it is not recommended to do this; it is better to create a separate account for such moments.

So, let's try to use the RunAs utility, for this we'll run command line and write the following

Please note that the password you enter will not be displayed.

After successfully entering the password and account name, the msconfig.exe window will open

Now let's create a shortcut to run msconfig.exe from an administrator account.

After successfully entering the password, the already known msconfig.exe will start.

The question suggests itself: will the administrator allow the user to know the password for an account that has administrator rights, the name of which can be easily viewed in the shortcut properties?

And yet, when launching the shortcut, the password will need to be entered every time, which is not convenient for the user; if you try to make his life easier by using the “/savecred” parameter, then you will create a huge hole in the security system.

Here's an example for creating a huge hole:

You want to make life easier for the user, add the “/savecred” parameter

Launch the shortcut and enter the password, when you first start the utility prompts you to enter the password

Enter the password and say goodbye! When you run it again, the utility will not require a password, or rather, it will now not require one at all, you will think “So what!” Let's try changing the launched utility in the shortcut properties, for example, to cmd.exe.

We are trying to launch and...

“Mother! He just cleared the arp cache." I think if you use “/savecred”, then you hardly know what the arp cache is and that you need administrator rights to clear it.

The ExecAs utility is designed to run any programs with rights different from those of the current user. Can be used to run the Locker program with administrator rights from a limited account. This allows operators to be prevented from accessing Locker program database files and generally from running any unwanted programs except Locker.

ExecAs is a very simple utility that even a schoolchild can work with.

A positive feature is its simplicity.

A negative feature is the lack of work with domain accounts.

So, after creating a local account with limited rights and an account with administrator rights, let's launch ExecAs.

When you first launch it, the application immediately prompts you to enter your account name and password, as well as indicate the path to the application you want to launch. We will run cmd.exe under the name of the local administrator. Please note that the account being entered is indicated without the machine name. To add an application, click on the folder icon, which is located at the end of the “Program” line.

Click “Record”. Our application will be number 1.

Close ExecAs and start again.

As we can see, cmd.exe started immediately when ExecAs was launched. The fact is that if you have one application in the list of launched applications in ExecAs, then this application will be launched immediately, this is quite good, but if you, for example, have more than one application?

Open cmd, go to the directory with the ExecAs application, and launch it with the parameter below

Now we can add another application, for example a calculator

Now if we close and open ExecAs we will see the window above, this should not happen. For this there is a parameter NN - the number of the program to be launched.

Let's create two shortcuts, one for launching cmd, the other for the calculator.

Launch both shortcuts

Don't forget about the program number, which can be changed when adding a program to be launched, and which can be viewed in the list of launched programs.

AdmiLink

AdmiLink is a utility with which the Administrator can create a shortcut that allows users with limited rights to run a specific (without the possibility of substitution!) program with the rights of the Administrator (or any other user) without (interactively) entering a password.

A typical application of the AdmiLink program is the administration of secure systems in which the user works mainly under his own limited account, and only launches certain functions strictly limited by the Administrator under the Administrator, without knowing his password and without being able to run other, unauthorized programs.

Another typical example is using AdmiLink to run potentially dangerous programs, e.g. Web browser, with reduced rights without entering a password. So, to avoid infecting your machine with a virus, you can run the Web browser under a limited user account, which dramatically reduces the likelihood of damage to the system. In order not to enter the limited user password every time, you can create a shortcut on the Desktop to launch the Web browser under the limited user.

How AdmiLink works

The package includes two programs: AdmiRun and AdmiLink.

AdmiRun is a simple console task that can only do one thing - run other programs as Administrator (or any other user). During installation, AdmiRun is copied to the Windows directory so that it is available in any directory. AdmiRun can work both in batch mode (in batch files) and to launch programs interactively (via a shortcut on the Desktop). The call format can be obtained by typing AdmiRun /? Of course, to run programs as Administrator, you need to know the password. On the other hand, for security reasons, the password cannot be shared openly, otherwise the entire security system becomes meaningless. The solution is to transfer the encrypted account (account = user + domain + password). AdmiRun receives the account demonstratively openly, through the command line, but nothing can be understood from it - the account is transmitted as an encrypted key. The key is tied to a specific executable file; without this file, AdmiRun simply will not be able to decrypt the account. Therefore, if the user tries to run another program with the same key, he will fail. Moreover, to make life more fun for hackers, the keys are generated using random numbers and are never repeated.

So, after installing AdmiLink, I advise you to uncheck the box to create all shortcuts during installation and run the utility only from the directory where it is installed, launch AdmiLink.

1) In the “Set the name of the executable file of the program of interest” field, specify the path by clicking on the floppy disk icon. In our case it will be cmd.exe

2) Leave the “Set command line for the executable file” field empty.

This step is optional if there are no parameters. Also, keep in mind that you can specify that account encryption is bound to the command line so that you cannot gain Administrator rights by overriding the command line parameters in the shortcut.
For example, when making a shortcut c:\windows\system32\control.exe timedate.cpl to correct the system time, do not forget to bind encryption to the command line, otherwise, by editing the shortcut, you can launch, for example, c:\windows\system32\control. exe nusrmgr.cpl and gain access to user management, which is not good at all.

3) The field “Set the starting directory of the program to be launched...” is usually filled in automatically

4) Set the program window display mode.

• SHOW - run a program visible on the screen. This is the normal mode for interactive programs.
• HIDE - run a program that is not visible on the screen. This is a mode for utilities running in the background.

Go to the “Accout” tab

5) In the “Domain name” field, indicate the NetBios name or full name domain, in our case test.lan.

6) In the “Username” field we can enter Administrator or click “…” to select an account.

7) Enter the password and its confirmation and click “Test”.

Press any key. If the message “Account is good to use” appears, then everything is fine and we move on.

8) Click “Generate AdmiRun launch key”; without this key, the application will fail to launch.

9) Go to the “Link” tab and give the shortcut a name

10) Set the directory, and do not forget about the account under which AdmiLink is launched

11) Set the file and image index for the shortcut. Typically this field is filled in automatically. By default, it is assumed that the image is taken from the program's executable file with index 0.

12) Click “Generate command line” and see the magical gobbledygook

13) Click “Create a shortcut now”

Clicking “Create Shortcut Now” creates a shortcut and resets all fields.

Launch the shortcut

Let's try to change the launched program in the shortcut properties, for example, to a calculator

Let's try to launch the shortcut

Please note that binding to MAC, IP and command line was not performed.

To the conclusion. Don't forget that in running program with administrator rights, you can open the “File” tab, if it exists, of course, and do whatever you want with the OS. These are more OS security issues, so be careful.

All people, peace to you!

In the operating room Windows system In certain situations, tools must be used with elevated privileges. This is necessary because of actions that lead to changes at the system level and ordinary users (not administrators) do not need this. In the article I will talk about run as administrator of any application on the computer.

When you launch programs with elevated rights, a window appears in which you need to confirm the launch -. Some users disable this feature altogether. Thus, the security of the computer is compromised. After all, if the UAC warning window does not appear, any malicious infection will be able to start from your computer as an administrator. “Bad” code and good luck.

To make it easier for users to run programs as an administrator, I have prepared a couple of methods.

Run as administrator using context menu

The context menu is called up with the right mouse button. Click on any program with the mouse and from the context menu click on the option. This opens the command line and other programs where elevated privileges are required.

Using the combination Ctrl+Shift+Enter when searching

When there is no tool on the desktop or in the Start menu, we turn to search. Any Windows version equipped with it, and in the tenth it is most convenient. Write some command, for example, cmd - command line. Having selected the result, simultaneously press the combination Ctrl+Shift+Enter. Simple way isn't it?

Additional Shortcut Properties

Let's say you are interested in the question... The icon is already located on the desktop as a shortcut, but you don't want to launch the context menu all the time. This problem can be solved.

Go to the shortcut properties (right mouse button and Properties) and go to the section "Additionally".

Additional options will open. There, check the box "Run as administrator". Now, when you run the program normally, it will always open with elevated rights.

Additionally! In the properties on the "Compatibility" tab there is an option "Run this program as an administrator." Also a useful thing.

Programs to run as administrator

There are the following programs: RunAs, AdmiLink, ExecAS.

RunAs Tool

It is part of Windows, so you can use it. To run it, just open the command line and enter the following command:

You will most likely be asked to enter a password. Be sure to enter it.

Let's create a shortcut on the desktop. Right-click on an empty area and select “Shortcut”. We write the same command as the location:

runas /user:PCName\UserName msconfig.exe

Give the shortcut a name and save it.

After launching the shortcut, a command line will open where you must enter the account password. When you enter the correct data, msconfig or the utility you selected will immediately launch.

In this situation, you or people with access to the PC will have to enter a password every time. This point can be solved by adding the /savecred parameter to the command, then the command will be like this:

runas /savecred /user:PCName\UserName msconfig.exe

If you are thinking about security, then it is better not to use such shortcuts with this option. It’s better to enter your password every time and not worry that some impudent person will use it using Windows without a password to please yourself and to your detriment.

Using the ExecAS tool

Running as administrator is possible using the ExecAS program. After launch, a window appears asking you to enter account information (login and password), as well as the program name and path. After entering the data, click "Record".

Our guinea pig appeared in the ExecAS window. Close the program and open it again. The program we specified in ExecAS will immediately open. To add an additional application, you need to enter ExecAS.exe /S on the command line. (In this case, you need to be in the directory with the utility, for example, C:\ExecAS).

Having launched ExecAS, we add some other program. Close the tool and launch it again. The same window appears. But this is not convenient for us, so let’s move on to creating shortcuts:

We make two shortcuts with the following commands:

• C:\ExecAS\ExecAS.exe 1
• C:\ExecAS\ExecAS.exe 2

Numbers 1 and 2 correspond to the program number in ExecAS.

Having launched the shortcuts, we see that they were opened as administrator.

Using the AdmiLink utility

The utility specified in the title is a console utility, and after installation it will be located in the Windows directory.

We launch the tool and see a very convenient window with a Russian interface, so it will be easy to figure it out.

• In the first field, enter the path to the file that we want to run;
• The command line parameters in the second field are optional;
• The third line will be filled in independently, if this is not the case, enter C:\windows\system32
• Window display mode. Line 4 has 2 parameters:
  • SHOW – standard software launch with a visible window;
  • HIDE – software runs in the background;

Configuring parameters on the tab Account:

• For the domain name, write the name of your PC, or NetBios and test.lan;
• Username – can be selected by clicking on the button with three dots;
• Account password and confirm.
• After entering all the data, click the button "Test".

The utility will check the functionality of the information we specified. Press any key in CMD.

After a successful test, press the button “Generate AdmiRun launch key”. If you don't do this, then nothing will work.

• Go to the “Link” tab and do the following:
• Shortcut name- call by any name;
• Catalog– indicate where the shortcut will be located;
• Picture– select an image for the shortcut;
• Press the button "Generate command line".
• Now press the big button “Create Shortcut Now!”.

The icon will immediately appear on the desktop or directory you specified.

Let's try to launch the shortcut. If everything went well and the program was launched as administrator, then congratulations. Otherwise, actions at some step were performed incorrectly.

If you go to the properties of the shortcut and change the program in the “Object” field to another, it simply will not start. This is a little protection against malware.

Job Scheduler

Run the program as administrator, just use the tool "Task Scheduler". There is one nuance here - if you are not an administrator, you will not be able to use it.

Enter just two words in the search: “Task Scheduler” and open the result.In the window on the right, select the item "Create task".

Call it an appropriate name, let's say you are launching the command line, then you can call it CMD. Also check the box "Run with highest rights".

On the "Actions" tab, click the button "Create".

Select an action (in our case, launch the program).Click Browse and select the utility to launch.If you run the command line, the path will be: C:\Windows\System32\cmd.exe.Now click OK.

A new line has appeared on the “Actions” tab. Great, you can click OK.

Shortcut creation stage

Create a shortcut on the desktop and enter the following command:

schtasks /run /tn task_name in scheduler

scheduler_task_name is the name you gave at the very beginning of the task creation process.

Hurray, we made the shortcut, but that's not all. Go to its properties.

On the Shortcut tab, change the icon. Of course, you don't have to do this.

Addition to the task scheduler method

For, you can use the Elevated Shortcut utility. You take a shortcut or executable file and drag it onto the Elevated Shortcut icon.

Running programs from the command line

If you open the command prompt as an administrator using the above methods, then launching all programs from CMD will also allow you to open them with elevated rights. How to transfer an account to another computer

Conclusions

We looked at a bunch of ways to run programs as an administrator. There are options where you need to enter a password - this is one of the safest solutions, because every time we enter a password, we don’t have to worry too much about losing some data. Virus programs will also not be able to launch Windows tools this way.

Many programs lack administrator privileges to function properly. These privileges allow programs to interfere with other programs and system settings. Even running programs under an administrator account, they do not have full administrator privileges; they must be run as an administrator. Usually, when you launch a program as an administrator, warnings from UAC (User Account Control) appear about the unsafe nature of such a launch. Be careful when choosing programs to launch from the administrator, because such a launch can significantly affect the operation of the operating system, and sometimes the hardware.

This is the most commonly used way to run a program as an administrator. Used to run the program one-time as an administrator, for example, during installation.

It is very important to make sure that the program is safe before launching. Otherwise you risk your operating system, which you will have to or use the services of the service.

Constantly running the program as administrator

In my practice of using a computer, I came across programs that, in order to work properly, required them to be constantly run as an administrator. The method described above is quite simple, but its constant implementation required “optimization” of the process. And it can be optimized necessary programs You can run it as administrator by simply double-clicking it.

authority September 23, 2011 at 6:54 pm

Running an application with administrator rights and without displaying a message when UAC is enabled (Windows 7)

• Closet *

Inspired by the article. I read the comments and I wanted to describe here the possibility of running a trusted application with administrator rights when UAC is enabled. This technology is really good step Microsoft is committed to the security of the user's use of the computer, but the user may often use unsigned applications that he trusts, which leads to constant UAC messages and further irritation of the user. I will look at how to run applications with administrator rights and without issuing a message from UAC using the example of using FAR Manager, which I need for work.
So, first you need to go to the task scheduler
“Start - All Programs - Accessories - System Tools - Task Scheduler”
and “Create task”. In the window that appears, set the “Name” (for example, FAR) of the task and check the “Run with highest privileges” option.
Next, go to the “Actions” tab and click the “New” button to configure the program to be launched.
In the “Program or script” field (Program/script), using the “Browse” button, indicate the location of the file we need to launch and click the “Open” button. Next, press the OK button twice.

Thus, we have a task with high privileges to run as administrator. Now you need to create a shortcut to run this task.

Create a shortcut on the desktop and in the “Object location” field (Target) enter schtasks /run /tn FAR (if the task name was several words separated by spaces, you must indicate the task name in the shortcut in “double quotes”). Click “Next”, set the name of the shortcut (it is best that it matches the name of the program) and click OK. Next, you can go to the properties of this shortcut and assign it an icon from the program. The disadvantage of this method is that in this way you can run only one copy of the program. To make two copies, you will need to register another task in the scheduler with a different name, but using the same system, and also make a shortcut to it.

Tags: Windows 7, UAC, Task scheduler, launching applications