The difference? You can install drivers, disable/enable devices and so on. For example, launching “runas /user:Administrator devmgmt.msc” will allow using Device Manager as Administrator and not just a standard user. There is a service utility “runas” that allows specifying alternate credentials. Also, most people won’t be able to figure out how to exploit the vulnerability anyway. It’s rather crude and not very secure but works nonetheless. What can one do when it’s necessary to allow standard users to have programs run as admin? For example, you want to allow your kids to play games on a regular user account but want to have some kind of monitoring program to run at all times? I’ve been searching for a solution for several hours and finally found something. System management tools, antivirus programs, “tweakers” all get around this restriction by running themselves as a service plus graphical application but most programs aren’t supposed to be run as services yet they still require admin rights.
Getting around the UACĪnyway, sometimes it could be necessary to allow certain programs to run as Administrator while using a standard user account.
Achtung, something dodgy!Īlso, if you were to leave your computer unattended, somebody could use it to install, for example, a keylogger, which could easily intercept your passwords and send them to the attacker… well, there are many other things that could happen. For example, suppose you downloaded a movie/song/picture and then all of a sudden it’s asking you to run it as administrator – it will immediately raise a red flag. One of the reasons is the UAC – User Account Control, which presents a pop-up asking for admin login and password because it’s trying to make changes to the system.
0 kommentar(er)
