Tip

Scripting elevation in Windows Vista with JavaScript

Recently I've discussed several techniques to elevate a process to the Administrator level in Windows Vista. All these techniques (including the one I'm about to mention) require that the user approve the UAC dialog that appears when the process is elevated. This is just the way process elevation works in Windows Vista.

In this tip I will pass on a technique courtesy of one of the people I rely on the most to get the straight dope about privilege elevation and least-privilege issues in Windows:

    Requires Free Membership to View

Aaron Margosis.

A member of Microsoft Consulting Services, Aaron created a utility called LUA Buglight. This tool helps administrators (as well as programmers) identify potential problems with applications that were due to the app not working right when it was run with a Limited User Account (LUA), as opposed to an admin user account.

Aaron has posted a scripting technique that allows you to elevate to admin any given process, from the command line or in a script. The trick involves creating a script—written in JavaScript—that can then be placed in your user's PATH (i.e., any directory mapped in the PATH variable) and invoked from the command line like a regular command. Activate a command with this script, and the UAC prompt will appear as it would if you'd manually launched the program as admin.

One advantage to using Aaron's elevate.js script is that, because it's a script and not a compiled executable, you can make any modifications you want to it to fit a particular setting. And you can do this without the hassle of recompiling it; changes can be tested immediately.

About the author: Serdar Yegulalp is editor of the Windows Insight, (formerly the Windows Power Users Newsletter), a blog site devoted to hints, tips, tricks and news for users and administrators of Windows NT, Windows 2000, Windows XP, Windows Server 2003 and Vista. He has more than 12 years of Windows experience under his belt, and contributes regularly to SearchWinComputing.com and SearchSQLServer.com.

More information on this topic:

 

This was first published in July 2007

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.