Solved

How to launch an app as administrator without giving the user local admin group membership?

Posted on 2016-10-26
9
83 Views
Last Modified: 2016-11-21
An app has to be launched as administrator, otherwise, it will not run properly.
But i do not want the computer user to be the member of local administrator group, for security reasons.
How would you make it?

Thanks!
0
Comment
Question by:techcity
  • 3
9 Comments
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 41860910
There is no secure way to achieve that goal. People might tell you there is, but those methods are utterly insecure.

The only secure way are 3rd party utilities like Powerbroker
0
 
LVL 13

Expert Comment

by:John Tsioumpris
ID: 41860945
There is a trick where you use task scheduler to create a task with admin rights and then you create a shortcut with the name of the task
schtasks /run /tn “TheTaskName”

Open in new window

Quotes
"

Open in new window

are needed....
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41860968
That is no trick. And it will not work since tasks that you start elevated will not show visibly. If they show for you, it's because you use the same user account and you are admin already.
0
 
LVL 23

Expert Comment

by:NVIT
ID: 41860982
@ John,

I think one concern is while the program is running. What can the user do in the program? Can they access sensitive files? Can they run programs to elevate their non-admin account? etc.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 41894982
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now