Lending admin password to someone: can anyone who has temporary admin access to the command line start another process with admin privileges from the command line?

Thomas Pondant

Hello,

In the episode on Windows security settings, Wes shows an example where Ronnie uses his admin password to give him admin access to a command line on Wes's account. Wes says then that if he starts another process like Internet Explorer he will not have admin access to this process. But what if he starts Internet Explorer from the command line (to which he has admin access thanks to Ronnie) instead of via the GUI, could he run IE as administrator?

Ronnie Wong

@thomas-pondant said in Lending admin password to someone: can anyone who has temporary admin access to the command line start another process with admin privileges from the command line?:

But what if he starts Internet Explorer from the command line (to which he has admin access thanks to Ronnie) instead of via the GUI, could he run IE as administrator?

The UAC should take control again if I've closed out of IE previously. The same procedure will be required. If I'm the admin, it should ask if I want to allow it and I just choose yes. If Wes, were to try it, it should present him with a dialog box to provide admin credentials.