For almost 10 years I have used WinRar to create an SFX archive of scripts that are used to run preventive maintenance on client computers. Some of the scripts make entries to the registry so I've always checked the administrative access box.
A week ago, I would have argued that the problem I've been seeing was impossible but, that just not the case.
Extensive testing and research has provided no explanation why an SFX WinRar archive with administrative access gives an extracted setup cmd script administrative access without the ability to write to the registry but that is exactly what happens.
I resolved the problem by using the setup script to start a service that then starts what was the original setup script and both the process and the original script works perfectly.
I need to create WinRAR SFX archive that should work with admin permissions on Windows 7. I can make it with WinRAR GUI but I need to make it with WinRAR command line interface (to integrate it into build process).At the moment my script is like that:
Second, if you have open the tab Advanced of Advanced SFX options dialog with the option Request administrative access in WinRAR GUI, there is a button Help which opens the help page for this dialog. This help page contains:
Request administrative access
Set this option if you wish to create SFX archive, which will request the administrative access when started in Windows Vista and later. This option does not change behavior of SFX archive in older Windows versions.
The policy works and the uninstaller runs, however it does not uninstall properly, the shortcuts, task bar items and start menu items for WinRAR all stay in place. The files in Program Files are gone though. When I change this to a user based policy the uninstall.exe /s works properly and all the shortcuts are gone as they should be. However, my typical users do not have the administrative rights to run this uninstall.exe. So it only works right if logging into an admin account since the user policy runs with the users permissions.
Create another machine script which will remove shortcuts from your local administrator's profile. If the software adds shortcuts to 'all users' , and/or 'default user', you'll want your this script to remove those as well.Compile a list of all the shortcuts the versions make.
-> The bat file works well but needs local admin credentials. For normal user who does not have elevated rights, they receive the message "Cannot uninstall - file C:\program files\winzip\readme.txt is in use by another program. Same thing shappens with WinRAR uninstall as well. If i run these script for normal user, it would error out saying a file is in use etc...
So, i am facing issues with admin privileges. Please let me know if there is ANYWAY to get this working by script. I have not created custom uninstallers before, is this possible via custom uninstaller? Do you know of any that i can use? I think i have browsed enough forums but i am still unable to get an answer.
The dlc file never had the winrar icon next to it and yes I opened it with winrar by mistake. Would that keep me from installing vehicles by chance? I ask because I tried to install this vehicle -2016-unmarked-srt-potatocat/ and got an error in open IV saying "process cannot access the file because it is being used by another process" when I tried dragging the yft,ytd, and hi.yft in to open iv. But I'm not sure if I even need open iv for this or not. Description didnt say.
right now we have setup where users are not local administrators on their machines.
If they need to install something they do "Run as administrator" and enter credentials for local administrator.
However, we want to block them to install winrar.exe even if they run installation as administrator.
Policy in Intune successfully applied to test machine.
However it blocks all installations, if I try Run as administrator on some .exe file it is blocked but I only wanted to block installation of WinRAR.
Does anyone have any idea? Is it possible to configure this in this kind of setup - when we have standard users and use local administrator account for installations?
I found here -use-applocker-allow-block-executable-files-windows-10-a.html
"You must be signed in as an administrator to use AppLocker."
Not having users as local admin is a good thing, but then giving them the local admin password partially defeats the purpose of not allowing them to be local admins. You should consider ending this practice as well.
Hold down the Shift key while pressing and holding down the SHIFT key to right-click the executable file or icon for the application, then select Run as. The following user has been chosen. Select OK from the User name and Password box, then type administrator account and password into the box.
When an app is running as administrator, certain applications can access a broader set of system functions. However, it is critical to note that running an application as an administrator can be hazardous to your personal information. The application has been compromised by malicious software, which can gain access to it and use escalation privileges to harm your system or data. To avoid potential safety issues, only run applications as administrators at critical times. By double-clicking the file and entering the information into the registry, you can run an app as an administrator on WinRAR. After selecting the file, the administrator option will be available. This method can be used to run almost any filetype or application. This is an excellent option for people who log in as members of the Users or Power Users groups and must perform administrative tasks while logged in. It is worthwhile to use an app as an administrator at times when you must, but doing so is only necessary when you must. In WinRAR, there are quite a few steps to follow to complete this task.
You can perform this process in a few simple steps by opening and extracting files as an administrator. When you double-click on a file, it will be converted to the registry, allowing you to right-click it and open it as an administrator. The program can also be launched with administrator privileges by right-clicking the file and selecting Run as Administrator. This allows you to perform tasks while being a member of another group, such as a user or power user, even if you are running as an administrator. The use of this method eliminates the need for users to switch to an administrator account in order to complete tasks.
By right-clicking the executable and selecting Send to Desktop (create a shortcut), you can create a desktop shortcut. Then, on the Properties menu, right-click on that shortcut and select it. To see the Advanced option, navigate to the Shortcut tab and click the bottom right corner of the dialog box. The Run as administrator option can be found in the Run as administrator field.
It is simple to run a program as an administrator in Windows 10. There are many legitimate apps that require an admin token to function properly. Because not every application requires admin privileges in order to function as an administrator, it is useful to understand how to make it run automatically. From the taskbar icon, you can use Taskbar as an administrator. In Windows 10, we explain how to use advanced shortcut properties to always use Administrator. If you have problems with Windows Explorer, you can use Task Manager to create new tasks and run them. Despite the fact that you must accept the dialog box, it will save you a few clicks.
If you do not have a shortcut to the app, you can always use its compatibility tab in its properties to make it an administrator. If you tick the box, you will be able to access the app as an administrator. Those who have access to the network must carry out their tasks on their own. Furthermore, you can grant the hidden administrator account extended privileges.
You may need to run certain programs on your Windows 10 computer as an administrator if you use them in a particular way. In order to gain access to certain parts of the system that would otherwise be unavailable to the program, it requires additional permissions. As an administrator, you must first open a run-box (Windows R), write cmd, and then press Control Shift Enter. As a result, the program will gain more permissions in order for it to function properly. Nonetheless, be aware that granting administrator privileges to programs you are not familiar with could also pose security risks.
The syntax for regedit and the command line options. While the regedit utility can be used on the command line, it cannot be used for granular administrative tasks. If you want to use reg, enter cmd in the Windows run or search box. When reg is entered, it displays the switches for the parameter and how it can be used.
Do you want to install software like games, social media apps, Steam, and others on a computer but don't have admin rights? If an administrator controls your laptop or desktop PC and hasn't made you an admin, you can't install or modify most software unless you get it from the Microsoft Store. However, you may be able to install some blocked programs without admin rights using a batch script. This wikiHow article will show you how to install software without admin privileges on Windows. Keep in mind that this only works for some programs.
A vulnerability exists in Openfire beginning with version 3.10.0 and patched in 4.7.5 and 4.6.8 that can allow an unauthenticated attacker to use the Openfire setup environment to access pages in Openfire that are typically limited to administrators. This vulnerability specifically conveys the ability for the attacker to perform path traversal to admin-restricted pages. The GitHub advisory for the vulnerability suggests the attacker is able to access restricted log files, and existing publicly available exploitation details suggests the installation of a webshell.
df19127ead