We help IT Professionals succeed at work.

How to allow an application to run as administrator without prompting the user for username and password in Windows 7

rjjacques
rjjacques asked
on
Hi,

On Windows 7 Pro, I have a couple of applications that need to be executed under "run as administator" option (the apps work just fine then) and since I am logged on as an administrator, I only get a confirmation prompt asking if I want to allow the application to modify my computer, yes or no. I simply click Yes to proceed.

However, the computer is in a Windows 2000 domain (upgrading is not an option at this point in time) and we have several users (standard users on the Windows 7 station) that need to use these applications, but I do not want them to have local admin rights. Therefore, when they try to use the applications, they get prompted for an administrator username and password. Giving them this information is out of the question: that would allow them to make other modifications to the system, not just run these apps.

So, is there any way to allow these applications to run with some default administrator's credentials ? Having a prompt requesting the user to run yes or no the app is fine.

Thanks
Comment
Watch Question

Top Expert 2012
Commented:
This is what do need to you:

1) Move the Application to a folder outside "Program Files". E.g. make a folder named "User Apps" or something like this.

2) Select the app folder properties (by clicking with right mouse button on it), go to "security" tab and press "edit" to change its permissions.

3) Press "Add" and enter the name of the user you want to run the app. Press ok.

4) In "Permissions for -user name-" box, mark the checkboxes to give him full control (or just "modify") rights. Press OK and OK. Now your users application has the nessesary permisions to write to its folders.

But the app may ask to write something in the systems registry. So, follow the next steps:

5) Go to start and run "regedit". Inside Registry Editor click "Computer" and make a search ("ctrl-F") with the app name (e.g. "quake.exe"). Wait to find it.

6) When you find some registry folder that is connected somehow with the app, press the right mouse button on it and select "permissions".

7) Here you have to add the user name once more and give him the full control permission. Now his app can write to system registry.

8)Go to the app shortcut you have created for the user, click properties and enable "always run as administrator".
Top Expert 2013

Commented:
Hi rjjacques,

I hope this will solve your problem as it will allow you to save the task with credentials.
http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html

Please note: you can also access remote Task Scheduler if you want to configure all workstation from a single machine.

Author

Commented:
hi rajeshjamnadas,

I tried your task trick, but it appears the application requires something like "run interactively with the desktop" , as I get nothing when I lauch the task.

René
you can try this create a batch file that will launch the required program.

Author

Commented:
The scheduled task works if I launch it when setup to use the current logged-on user. But when I try to use another administrator account, it either tells me whe user must be granted a user right or it simply fails with some "access denied" error.

How would you launch a program/batch file to run with elevated privileges ?
Top Expert 2012

Commented:

Author

Commented:
Thanks for all the help guys, and sorry about not following up quickly as many personal things have been going on in the last month.

Finally, one of the app did not require admin rights but just UAC turned off, and the other is now an non-issue.
Top Expert 2013

Commented:
rjjacques--It is risky from a Security point of view to "turn off"  UAC.