Run as admin on domain admin account? WHY?!

[rslulz]

So I'm sitting here scripting out a batch job, and it requires elevated command prompt permissions so I added that into it. However I started thinking about it why I need to do this obviously the script won't work if I don't, but I'm curious as to why... Anyone else ponder this?

[ihaveaproblem]

because UAC is turned on for a security measure to prevent unwanted applications running without your permission.
At least I think that's why.
Personally I turn off UAC every where. Hate the thing :P

[jamesbrown]

Yes, i've had similar problems and its down to UAC

[SYNACK]

It is down to UAC as it requires elevation on aything other than the local admin or core admin account. The elevation can either just prompt for a yes/no if you are an admin or a password and username if a standard user.

UAC is a good thing as it forces security in as a consideration. It solves more problems than it creates and you should really learn to work with it if possible rather than just rolling back to last decades practice.

[rslulz]

I'm not referring to UAC controls gent's I'm referring to elevated command prompt even with the highest level of rights somethings require command prompt to run as administrator even though I'm already an admin? I'm talking to the specific command prompt example.

[SYNACK]

I'm not referring to UAC controls gent's I'm referring to elevated command prompt even with the highest level of rights somethings require command prompt to run as administrator even though I'm already an admin? I'm talking to the specific command prompt example.

Weird, what command. Some stuff needs to be run as the domain administrator like if your running domain schema upgrades.

[rslulz]

SYNACK should I send you the vbs? I don't know about posting it here.

[SYNACK]

SYNACK should I send you the vbs? I don't know about posting it here.

You can if you want, I might be able to see something in there that is tripping over predetermined access privilages.

[rslulz]

sent

[mavhc]

That's part of UAC, even as an admin programs by default don't have admin access, the difference is they can get it without needing a password.

[SYNACK]

The script in question called another executable that accessed privilaged areas of the system the same information could be grabbed through WMI in a VBS so that turned out to be the easiest way around the app that was not handling elevation.