+ Post New Thread
Results 1 to 11 of 11
Windows Server 2008 R2 Thread, Run as admin on domain admin account? WHY?! in Technical; So I'm sitting here scripting out a batch job, and it requires elevated command prompt permissions so I added that ...
  1. #1

    Join Date
    Mar 2012
    Location
    US
    Posts
    56
    Thank Post
    5
    Thanked 3 Times in 3 Posts
    Rep Power
    5

    Run as admin on domain admin account? WHY?!

    So I'm sitting here scripting out a batch job, and it requires elevated command prompt permissions so I added that into it. However I started thinking about it why I need to do this obviously the script won't work if I don't, but I'm curious as to why... Anyone else ponder this?

  2. #2

    Join Date
    Jun 2010
    Location
    England
    Posts
    735
    Thank Post
    89
    Thanked 52 Times in 46 Posts
    Rep Power
    34
    because UAC is turned on for a security measure to prevent unwanted applications running without your permission.
    At least I think that's why.
    Personally I turn off UAC every where. Hate the thing :P

  3. Thanks to ihaveaproblem from:

    SimpleSi (10th August 2012)

  4. #3

    Join Date
    Apr 2011
    Posts
    67
    Thank Post
    14
    Thanked 7 Times in 7 Posts
    Rep Power
    8
    Yes, i've had similar problems and its down to UAC

  5. #4

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    It is down to UAC as it requires elevation on aything other than the local admin or core admin account. The elevation can either just prompt for a yes/no if you are an admin or a password and username if a standard user.

    UAC is a good thing as it forces security in as a consideration. It solves more problems than it creates and you should really learn to work with it if possible rather than just rolling back to last decades practice.

  6. #5

    Join Date
    Mar 2012
    Location
    US
    Posts
    56
    Thank Post
    5
    Thanked 3 Times in 3 Posts
    Rep Power
    5
    I'm not referring to UAC controls gent's I'm referring to elevated command prompt even with the highest level of rights somethings require command prompt to run as administrator even though I'm already an admin? I'm talking to the specific command prompt example.

  7. #6

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by rslulz View Post
    I'm not referring to UAC controls gent's I'm referring to elevated command prompt even with the highest level of rights somethings require command prompt to run as administrator even though I'm already an admin? I'm talking to the specific command prompt example.
    Weird, what command. Some stuff needs to be run as the domain administrator like if your running domain schema upgrades.

  8. #7

    Join Date
    Mar 2012
    Location
    US
    Posts
    56
    Thank Post
    5
    Thanked 3 Times in 3 Posts
    Rep Power
    5
    SYNACK should I send you the vbs? I don't know about posting it here.

  9. #8

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by rslulz View Post
    SYNACK should I send you the vbs? I don't know about posting it here.
    You can if you want, I might be able to see something in there that is tripping over predetermined access privilages.

  10. #9

    Join Date
    Mar 2012
    Location
    US
    Posts
    56
    Thank Post
    5
    Thanked 3 Times in 3 Posts
    Rep Power
    5
    sent

  11. #10

    Join Date
    Jan 2007
    Location
    Nottinghamshire
    Posts
    530
    Thank Post
    1
    Thanked 84 Times in 58 Posts
    Rep Power
    37
    That's part of UAC, even as an admin programs by default don't have admin access, the difference is they can get it without needing a password.

  12. #11

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    The script in question called another executable that accessed privilaged areas of the system the same information could be grabbed through WMI in a VBS so that turned out to be the easiest way around the app that was not handling elevation.

SHARE:
+ Post New Thread

Similar Threads

  1. Software will not run as user with locked down account
    By Edu-IT in forum Educational Software
    Replies: 28
    Last Post: 9th September 2010, 06:09 PM
  2. Does NetSupport School Tutor PC need Admin Rights on Domain?
    By k_Lady in forum Network and Classroom Management
    Replies: 1
    Last Post: 10th April 2008, 11:33 AM
  3. Is my domain Admin account screwed?
    By HodgeHi in forum Mac
    Replies: 2
    Last Post: 9th January 2008, 03:38 PM
  4. admins and domain admins
    By browolf in forum Windows
    Replies: 25
    Last Post: 1st November 2006, 03:29 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •