Some programs on Windows 7 or Windows 8 require more rights and can only be run as an administrator.
To run the program as an administrator, you must know the password if you are logged in as a standard user, otherwise this procedure will not work.
That's not all. You can log into Windows 7 or Windows 8 as an administrator, some programs will still give an error, for example, “Run time error 10”.
This happens rarely, but it does happen. Then you need to additionally confirm administrator rights.
This is easy to do, regardless of the Windows you are using: Windows 7 or Windows 8 or even Windows 10.
To do this, right-click or, if you have a laptop, click on the touchpad on the shortcut of the program to be launched.
After this, a window with a context menu will pop up on your computer monitor or laptop screen.
In it, almost at the very top, click on the line Run as administrator, as in the figure below.
How to always run a program with administrator rights
If you use a program that requires administrator rights very often, then you do not need to always call context menu.
This operation can be set to “automatic” and then run the program as usual.
To do this, right-click on the shortcut and in the menu that appears, click on the “properties” line (at the very bottom).
After that, at the very top, click on the “compatibility” line and in the tab that appears, check the box next to the line: “run this program as an administrator,” then (at the very bottom) “apply” and “OK.”
Now it will always run with the appropriate rights without your intervention.
Here, as in the first case, you will need a password if you are logged into your account as a regular user.
Typically, applications in Windows 8 (8.1) require more rights; Windows 7 is simpler in this regard.
To make using your computer a little easier, you can change your User Account Control settings.
There is a slider there - lower it to the very bottom, then the system will be less picky. Good luck.
Good day, dear visitor. In today’s article, I suggest you consider not the usual installation and configuration of servers and client stations from the very beginning, but the ordinary everyday life of a system administrator. We will consider launching a specific application as an administrator, we will look at what solutions exist and how they differ. The reason why administrators encounter this problem is quite simple; in our IT outsourcing practice, we quite often encounter a situation where an application (especially from domestic developers) is not UAC-oriented, and why is this, ask the application developers. We will test in the Hyper-V virtual environment on virtual machine second generation with Windows 8.1 OS.
Diversity is present
We will consider three utilities:
RunAs - runs specific tools and programs with permissions different from those granted by the current one Account. This utility is not third-party; it is included with Windows OS. Help for the runas utility /?
We will test using the built-in utility msconfig.exe, which is included in the Windows OS. This utility can only be launched from an account with administrator rights.
ATTENTION! The utility will be launched from a domain administrator account. In reality, it is not recommended to do this; it is better to create a separate account for such moments.
So, let's try to use the RunAs utility, for this we'll run command line and write the following
Please note that the password you enter will not be displayed.
After successfully entering the password and account name, the msconfig.exe window will open
Now let's create a shortcut to run msconfig.exe from an administrator account.
After successfully entering the password, the already known msconfig.exe will start.
The question suggests itself: will the administrator allow the user to know the password for an account that has administrator rights, the name of which can be easily viewed in the shortcut properties?
And yet, the password will need to be entered every time when launching the shortcut, which is not convenient for the user; if you go to make life easier for him by using the “/savecred” parameter, then you will create a huge hole in the security system.
Here's an example for creating a huge hole:
You want to make life easier for the user, add the “/savecred” parameter
Launch the shortcut and enter the password, when you first start the utility prompts you to enter the password
Enter the password and say goodbye! When you run it again, the utility will not require a password, or rather, it will now not require one at all, you will think “So what!” Let's try changing the launched utility in the shortcut properties, for example, to cmd.exe.
We are trying to launch and...
"Fuck! He just cleared the arp cache." I think if you use “/savecred”, then you hardly know what an arp cache is and that you need administrator rights to clear it.
The ExecAs utility is designed to run any programs with rights different from those of the current user. Can be used to run the Locker program with administrator rights from a limited account. This allows operators to prohibit access to Locker program database files and, in general, to launch any unwanted programs other than Locker.
ExecAs very simple utility, which even a schoolchild can work with.
A positive feature is its simplicity.
A negative feature is the lack of work with domain accounts.
So, after creating a local account with limited rights and an account with administrator rights, let's launch ExecAs.
When you first launch it, the application immediately prompts you to enter your account name and password, as well as indicate the path to the application you want to launch. We will run cmd.exe under the name of the local administrator. Please note that the account being entered is indicated without the machine name. To add an application, click on the folder icon, which is located at the end of the “Program” line.
Click “Record”. Our application will be number 1.
Close ExecAs and start again.
As we can see, cmd.exe started immediately when ExecAs was launched. The fact is that if you have one application in the list of launched applications in ExecAs, then this application will be launched immediately, this is quite good, but if you, for example, have more than one application?
Open cmd, go to the directory with the ExecAs application, and launch it with the parameter below
Now we can add another application, for example a calculator
Now if we close and open ExecAs we will see the window above, this should not happen. For this there is a parameter NN - the number of the program to be launched.
Let's create two shortcuts, one for launching cmd, the other for the calculator.
Launch both shortcuts
Don't forget about the program number, which can be changed when adding a program to be launched, and which can be viewed in the list of launched programs.
AdmiLink
AdmiLink is a utility with which the Administrator can create a shortcut that allows users with limited rights to run a specific (without the possibility of substitution!) program with the rights of the Administrator (or any other user) without (interactively) entering a password.
A typical application of the AdmiLink program is the administration of protected systems, in which the user works mainly under his own limited account, and only certain functions strictly limited by the Administrator are launched under the Administrator, without knowing his password and without the ability to run other, unauthorized programs.
Another typical example is using AdmiLink to run potentially dangerous programs, e.g. Web browser, with reduced rights without entering a password. So, to avoid infecting your machine with a virus, you can run the Web browser under a limited user account, which dramatically reduces the likelihood of damage to the system. In order not to enter the password of a limited user every time, you can create a shortcut on the Desktop to launch a Web browser under a limited user.
How AdmiLink works
The package includes two programs: AdmiRun and AdmiLink.
AdmiRun is a simple console task that can do only one thing - run other programs as Administrator (or any other user). During installation, AdmiRun is copied to the Windows directory so that it is available in any directory. AdmiRun can work both in batch mode (in batch files), and for interactive launch of programs (via a shortcut on the Desktop). The call format can be obtained by typing AdmiRun /? Of course, to run programs as Administrator, you need to know the password. On the other hand, for security reasons, the password cannot be shared openly, otherwise the entire security system becomes meaningless. The solution is to transfer the encrypted account (account = user + domain + password). AdmiRun receives the account demonstratively openly, through the command line, but nothing can be understood from it - the account is transmitted as an encrypted key. The key is tied to a specific executable file; without this file, AdmiRun simply will not be able to decrypt the account. Therefore, if the user tries to run another program with the same key, he will fail. Moreover, to make life more fun for hackers, the keys are generated using random numbers and are never repeated.
So, after installing AdmiLink, I advise you to uncheck the box to create all shortcuts during installation and run the utility only from the directory where it is installed, launch AdmiLink.
1) In the “Set the name of the executable file of the program of interest” field, specify the path by clicking on the floppy disk icon. In our case it will be cmd.exe
2) Leave the “Set command line for the executable file” field empty.
This step is optional if there are no parameters. Also, keep in mind that you can specify that account encryption is bound to the command line so that you cannot gain Administrator rights by overriding the command line parameters in the shortcut.
For example, when making a shortcut c:\windows\system32\control.exe timedate.cpl to correct the system time, do not forget to bind encryption to the command line, otherwise, by editing the shortcut, you can launch, for example, c:\windows\system32\control. exe nusrmgr.cpl and gain access to user management, which is not good at all.
3) The field “Set the starting directory of the program to be launched...” is usually filled in automatically
4) Set the program window display mode.
- SHOW - run a program visible on the screen. This normal mode for interactive programs.
- HIDE - run a program that is not visible on the screen. This is a mode for utilities running in the background.
Go to the “Accout” tab
5) In the “Domain name” field, indicate the NetBios name or full domain name, in our case test.lan.
6) In the “Username” field we can enter Administrator or click “…” to select an account.
7) Enter the password and its confirmation and click “Test”.
Press any key. If the message “Account is good to use” appears, then everything is fine and we move on.
8) Click “Generate AdmiRun launch key”; without this key, the application will fail to launch.
9) Go to the “Link” tab and give the shortcut a name
10) Set the directory, and do not forget about the account under which AdmiLink is launched
11) Set the file and image index for the shortcut. Typically this field is filled in automatically. By default, it is assumed that the image is taken from the program's executable file with index 0.
12) Click “Generate command line” and see the magical gobbledygook
13) Click “Create a shortcut now”
Clicking “Create Shortcut Now” creates a shortcut and resets all fields.
Launch the shortcut
Let's try to change the launched program in the shortcut properties, for example, to a calculator
Let's try to launch the shortcut
Please note that binding to MAC, IP and command line was not performed.
To the conclusion. Don't forget that in running program with administrator rights, you can open the “File” tab, if it exists, of course, and do whatever you want with the OS. These are more OS security issues, so be careful.
All people, peace to you!
Often a situation arises when you need to run cmd with administrator rights. However, this is not so easy to do for an untrained user. The whole problem is that by default, cmd is launched as the current user; to run as an administrator, you either need to log into the system under the admin username, or do some trick.
There is a certain nuance that needs to be done before running the command line as an administrator. You need to check whether the administrator account is enabled, if it is enabled, assign a password to it. Now let's take a closer look.
First, you need to check whether your administrator account is enabled. To do this, open “ Computer management”
go to the item “ Local users and groups” — “Users“. As you can see, in my case the account “ Administrator” is disabled (there is an arrow on the icon).
Double-click to open the account properties and uncheck the “ Disable account”
Click “ OK“. The arrow from the admin account icon has disappeared, which means it is enabled. Now let's set a password. To do this, right-click on the account “ Administrator” and select the menu item “ Set password...”
On the password change warning, click “ Continue” and enter the password twice
Ready! You now have an administrator account and know the password for it. Let's move on to the next stage.
Launch CMD with administrator rights
Open the command line by clicking “ Start” — “Execute“, or keyboard shortcut “ Win+R” and enter the command cmd. In the window that opens, write the following:
runas /profile /user:mymachine\Administrator cmd
(Where mymachine– this is the name of your computer)
and press Enter. The Command Prompt will ask you for an administrator password, enter it and wait for Command Prompt to launch with administrator rights. Everything would be fine, but after entering I got an error:
This error can appear in two cases. The first is that you entered the wrong password. Second, I have never logged in under an administrator account (my version).
You need to log out and log in as an administrator, so that's what I did
You can now log out and log in again using your account. Once you are logged in with your account, try running cmd again as an administrator.
And voila! A second command prompt window opened under the administrator account. Now you can browse directories, and even run applications as an administrator.
Different kinds software for their correct operation or when installed in operating system Windows 10 often requires administrator rights. To help PC users run utilities with admin rights, we will look at various ways their launch in the operating room Windows system 10.
How to log into applications with admin rights from the Start screen
For example, we installed two utilities CCleaner And VLC media player and put them on the home screen. The first utility is used to system cleaning, and the second one is quite popular video player. So let's get started. Let's go to the start screen and right-click on the application CCleaner. In the context menu that appears, go to “ Advanced / Run as administrator».
This is what startup looks like VLC media player.
Using this method, you can launch any application pinned to the Start screen.
How to log into a program as an administrator through the Start menu
If you go to the menu " Start" to the tab " All applications", we can find our installed applications CCleaner and VLC media player. The principle of their launch is the same as in the first example. For utility CCleaner shown in the image below.
And for the utility VLC media player in the following figure.
As you can see, the second and first examples are very similar. Therefore, use the option that is more convenient for you.
How to log into an application as an administrator via a shortcut on the desktop
To launch the application CCleaner Let's go to the context menu of its shortcut and select the appropriate item, as shown in the image below.
For the second program the example looks similar.
If you want these programs to run with admin rights in automatic mode , then perform the operations described below. Go to the shortcut properties tab Compatibility" and check the box next to the parameter responsible for run as administrator, as shown in the image below.
Also in the shortcut properties on the tab " Label"You can go to a window in which you can also select automatic launch with special privileges by clicking the Advanced button.
Running applications as administrator via search in Windows 10
Using the combination “Win” + “Q” or using the shortcut next to the “ button Start» let's launch search box Windows 10 and enter the name of the application we installed as shown below.
Let's click on the result found and select the item we are looking for. Working with the second utility looks the same way.
How to log into the program as an administrator via the console
To run programs with elevated privileges, we need to launch the console itself in admin mode. In Windows 10, you can launch the Command Prompt in this mode in three ways.
First method through the menu " Start».
Second by using Windows search 10 for the phrase " CMD».
AND third by right-clicking on the Start icon or typing the combination Win + X and selecting the appropriate item.
Let's choose one of the methods and run the program in administrator mode. Since the console runs in administrator mode, it will launch utilities in the same mode. For example, to run CCleaner you need to go to the directory in which the utility is installed. To do this, type the following command: cd c:\Program Files\CCleaner After that, type the command: Ccleaner.exe which will open the utility itself. The sequentially typed commands for the utility are shown in the image below.
For utility VLC media player you need to type the commands: cd C:\Program Files\VideoLAN\VLC
vlc.exe
In the same way, as shown in the example, you can launch any installed program.
Login under the "Administrator" account
Since for security reasons the Windows 10 operating system has restrictions on master accounts, we use additional options to launch utilities in the mode with special privileges. In order for all the capabilities of the account to be revealed, we need to go to the console as an administrator and type the following command in it:
Now you need to restart your computer and log in under the new entry that appears “ Administrator" In this account, all applications will run with elevated privileges.
This is easy to check. For example, let's run the program " Execute"Using the key combinations Win + R and enter the command " CMD", which we will do. After execution, the console will open in administrator mode, this can be seen at the top of the window.
If we opened the console as a regular administrator, then we can only log into it without extended rights.
After completing the steps described above, you will be able to access all utilities with extended privileges.
Getting access as a regular user
Sometimes there are situations when you need to run some utility with admin rights. For example, your computer is used by an employee at work and his account has restricted access to some programs. To don't give out your password, you can solve this problem remotely by logging into your PC and running the necessary utility with admin rights using your password.
Let's consider working with the uTorrent utility, which has limited access from a regular account. To do this, let’s go to the context menu of the uTorrent utility shortcut and, in a convenient way for you, execute the item responsible for admin rights.
After this, a window will open that will ask for the password for the admin account.
After entering the password, you will open the utility on a regular account, and the user will be able to use the utility.
Let's sum it up
This article discusses all types of starting programs in administrator mode. An example is also considered in which the accounting Windows entry 10 gains enhanced privileges for programs, allowing them to run in administrator mode without using additional options.
I would also like to note that this material will be especially useful for beginners system administrators and experienced PC users. We hope that our readers will take away from our article useful information which will help them solve their problem.
Video on the topic
