Windows 10: Run .BAT as admin without UAC prompt?

Edit: Marked as "Solved", because it looks like under Win 10 I can no longer do this quite the way I used to in Win 7, and I have multiple suggestions as to alternate approaches, any one of which ought to work.

((Moved from the "General" forum))

Can anyone help? I am trying to run a .BAT script that needs admin privileges, and I need to lose the annoying UAC prompt. I found out how to do that under Win 7, but can't get the same approach to work under Win 10.

I have created a task with "Run with highest privileges" to start my script. I then attempt to start it from a desktop shortcut. That works fine under WIn 7, and I've seen a couple of tutorials saying that it works under WIn 10 as well - but I can't get it to.

If I run the new task from within Task Scheduler, to check it out, it does exactly what I expect it to.

When I simply attempt to run it from the desktop shortcut (using a command of format schtasks /run /tn "mytask"), though, all that happens is that a window of some sort pops and disappears way too fast for me to see what it is trying to tell me (I've tried looking in event viewer for some sort of indication as to what it's objecting to, but can't see anything relevant). Under Win7, my script would execute successfully at this point.

If I finally cave in and choose to launch the shortcut with "Run as Administrator", the script executes OK - but that merely triggers the very UAC prompt I'm trying to avoid.

The account I'm using is an administrator. My script, amongst other things, executes runas.exe to launch a .EXE file under a second admin account.

Any bright ideas? Or other ways to achieve the same result?

:)

 

Run As Administrator - Windows10

Hi,

In Windows 10....

I would like to run the command prompt as admin (but without doing the runas administrator) each time I need admin priv..

so I created a bat file as follows:

@echo off

runas /user:domain\admin /savecred "%SystemRoot%\system32\cmd" - saved this as admin_bat

Now the first time it runs it prompts for the admin password when entered it (saves the credentials) and runs fine after that (even after rebooting)..

But My question is : When I run explorer or control command from the new DOS (admin_bat) - its throws access denied error.. why is it? isn't the new command prompt opened as administrator with full access???.. if not, what should I do to open it with full
permissions

( note: requirement is whenever the admin_bat is clicked UAC should not pop-up and should login in directly)?

Thanks

 

UAC allows users to install software without admin rights?

Hi Everyone,

It has come to our attention that our users can in fact install software without an admin account or an admin present. This is done simply by then doing the following:

The user downloads the app / package.

User runs install.

User is presented with UAC.

User puts their own username and password in presses enter and the software carrys on.

Surely, UAC should not allow the user to proceed to install software? This is all enabled via Group Policy and everything is defined as it should be.

Not sure why UAC is failing like this? Any suggestions would be greatly appreciated.

**Just found**

When a user right clicks on a program and selects "Run as Administrator". Uses their own details it runs happily. Almost as if domain users have admin rights?

 

You could disable UAC via control panel...

I have a lot of scripts that bypass the admin - but UAC always pops-up

 

I could, sure. But that's a bit like cutting off a leg because you've lost your toenail clippers. In principle I'm happy with UAC being on. This is for something I run regularly, and trust; I was looking for something a little less... ...extreme.

Plus, frankly, it's frustrating that something that worked OK under Win 7 doesn't seem to want to work under Win 10, when it's not obvious why it shouldn't (and when other people also seem to think that it still should). I'd like, if I can, to understand why, and whether it can be made to.

 

It's part of tightened security in W10. Can't have both security and letting anything to run loose without at least a warning.

 

Create a reg file with code below and merge into the registry to avoid UAC prompt from bat file:
Windows Registry Editor Version 5.00

Code: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{E2F13B98-650F-47DB-845A-420A1ED34EC7}User\Software\Microsoft\Windows\CurrentVersion\Policies\Associations] "LowRiskFileTypes"=".exe;.bat;.cmd;.vbs" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations] "LowRiskFileTypes"=".exe;.bat;.cmd;.vbs"[/quote]

 

Compile the bat file and create it as an exe and the problem should go away. I use Batch Compiler Batch Compiler | Home | Freeware IDE compile convert bat to exe advance batch commands debugger and resources

 

Except that I can set a trigger on my task and have it run (say, at a time of my choosing) successfully, without further interaction, and without a prompt. Or run it straight from the Task Scheduler. But if I want to launch it conveniently...?

Apparently, even though I'm an admin, I'm not safe with matches.

 

Thanks. If all else fails, I'll probably go that route.

 

Thanks, I'll take a look.

(Edit: Haven't tried this yet, but you're probably right that this should work; plenty of people discuss taking this approach, but every reference I see now talks about "programs". I guess that WIn 7 was slightly more lax in allowing .BAT as well.)

 

Guess, I'll have to do a little testing with the suggestions above, as well...
Thanks..

 

If you want to use the converter. IMO, it is better to use a portable version, why install something that is seldom used, Here's the link for portable version (no setup/install required):
Bat To Exe Converter Portable - Free download and software reviews - CNET Download.com
However, I think using registry hack is good enough.