1
I have two accounts on my windows xp home desktop. The default regular user is used for everything and the 2nd user which has admin rights is used only for installations. I do this to avoid malware infestations during web browsing and limited user account is guarding against online threats to a good extend but many programs refuse to run under limited rights like revo uninstaller. many installs i run from limited user by selectin "run as" from right click context menu of the .exe file. but some apps need admin rights for certain. I use "switch user" to go to admin mode and do the install/uninstall. but the admin user has none of my preferences bookmarks setup nor has my locate32 indexing done and ready for fast search Is there a utility which I can use "run as" login in administration login and use that to grant my limited user admin rights for a limited amount of period like few hours or days? Please help. I guess MS might have closed many doors of it for fear of exploitation of the API. are there any?
I don't think that there is any way of doing this, but it's a good idea. – ChrisF – 2010-04-27T20:19:37.653
It might be possible to use the security API to create a token with your SID but Administrator rights (maybe
DuplicateTokenEx()
andSetTokenInformation()
) and pass it toCreateProcessWithTokenW()
. It would need some magic though... There's alsoAdjustTokenPrivileges()
, which would probably be easier. – user1686 – 2010-04-27T20:29:04.050Windows 7 does it naturally, even users with admin rights have to confirm them every time by entering password unless UAC is disabled. – Dani – 2011-07-30T13:48:23.250