Tuesday, 24 February 2015

How To Create a Shortcut That Lets a Standard User Run An Application as Administrator


image
Want to allow a standard user account to run an application as administrator without a UAC or password prompt? You can easily create a shortcut that uses the runas command with the /savecred switch, which saves the password.
Note that using /savecred could be considered a security hole – a standard user will be able to use the runas /savecred command to run any command as administrator without entering a password. However, it’s still useful for situations where this doesn’t matter much – perhaps you want to allow a child’s standard user account to run a game as Administrator without asking you.

Enabling the Administrator Account
First you’ll need to enable the built-in Administrator account, which is disabled by default.
To do so, search for Command Prompt in the Start menu, right-click the Command Prompt shortcut, and select Run as administrator.
image
Run the following command in the elevated Command Prompt window that appears:
net user administrator /active:yes
image
The Administrator user account is now enabled, although it has no password.
To set a password, open the Control Panel, select User Accounts and Family Safety, and select User Accounts. Click the Manage another account link in the User Accounts window.
image
Select the Administrator account, click Create a password, and create a password for the Administrator account.
image

Creating the Shortcut

Now we’ll create a new shortcut that launches the application with Administrator privileges.
Right-click the desktop (or elsewhere), point to New, and select Shortcut.
image
Enter a command based on the following one into the box that appears:
runas /user:ComputerName\Administrator /savecred “C:\Path\To\Program.exe
Replace ComputerName with the name of your computer and C:\Path\To\Program.exe with the full path of the program you want to run. For example, if your computer’s name was Laptop and you wanted to run CCleaner, you’d enter the following path:
runas /user:Laptop\Administrator /savecred “C:\Program Files\CCleaner\CCleaner.exe”
image
Enter a name for the shortcut.
image
To select an icon for your new shortcut, right-click it and select Properties.
image
Click the Change Icon button in the Properties window.
image
Select an icon for your shortcut. For example, you can browser to CCleaner.exe and choose an icon associated with it. If you’re using an other program, browse to its .exe file and select your preferred icon.
image
The first time you double-click your shortcut, you’ll be prompted to enter the Administrator account’s password, which you created earlier.
image
This password will be saved – the next time you double-click the shortcut, the application will launch as Administrator without asking you for a password.

As we mentioned above, the standard user account now has the ability to run any application as Administrator without entering a password (using the runas /savecred command to launch any .exe file), so bear that in mind.

No comments:

Post a Comment