none
Run As Admin

    Question

  • Just a quick question, because someone just recently mentioned this solution to me. If a user is logged in as a standard user, how much protection is there if a program is downloaded and then run as domain administrator? Will this create a sandbox for the program that it would not be able to break from? Or would running the program as a domain admin open up everything the program anyway?

    Maybe a noob question but it is something I have never heard referenced before and I would like to know if there is any validity to it or MS documents to confirm or deny this. 

    Thanks,

    • Moved by Just KarlModerator Thursday, August 20, 2015 2:03 PM Looking for the proper forum.
    Wednesday, August 19, 2015 5:52 PM

Answers

  • Hello,

    Depending on your OS, I'd ask in the Windows 7 IT Pro forums

    Or the Windows 8.1 IT Pro forums.

    Or in the Windows 10 IT Pro forums.

    However, if I understand the question correctly:

    If you are logged into a computer with a standard account which has no permission to install anything, and then run a program (say a downloaded installer) as a domain admin that program has domain admin permissions and could in fact perform any operation as if the domain admin is logged in on the pc.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})


    Thursday, August 20, 2015 2:03 PM
    Moderator

All replies

  • Hello,

    The TechNet Sandbox forum is designed for users to try out the new forums functionality. Please be respectful of others, and do not expect replies to questions asked here.

    As it's off-topic here, I am moving the question to the Where is the forum for... forum.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Thursday, August 20, 2015 2:00 PM
    Moderator
  • Hello,

    Depending on your OS, I'd ask in the Windows 7 IT Pro forums

    Or the Windows 8.1 IT Pro forums.

    Or in the Windows 10 IT Pro forums.

    However, if I understand the question correctly:

    If you are logged into a computer with a standard account which has no permission to install anything, and then run a program (say a downloaded installer) as a domain admin that program has domain admin permissions and could in fact perform any operation as if the domain admin is logged in on the pc.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})


    Thursday, August 20, 2015 2:03 PM
    Moderator
  • Agree, the user downloading would not have any impact on the user executing it.

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Friday, August 21, 2015 2:52 AM
    Moderator