Run As Admin

Question

Just a quick question, because someone just recently mentioned this solution to me. If a user is logged in as a standard user, how much protection is there if a program is downloaded and then run as domain administrator? Will this create a sandbox for the program that it would not be able to break from? Or would running the program as a domain admin open up everything the program anyway?

Maybe a noob question but it is something I have never heard referenced before and I would like to know if there is any validity to it or MS documents to confirm or deny this. 

Thanks,

Answer 1

Hello,

The TechNet Sandbox forum is designed for users to try out the new forums functionality. Please be respectful of others, and do not expect replies to questions asked here.

As it's off-topic here, I am moving the question to the Where is the forum for... forum.

Karl

---

When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book: Windows PowerShell 2.0 Bible
My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Answer 2

Hello,

Depending on your OS, I'd ask in the Windows 7 IT Pro forums

Or the Windows 8.1 IT Pro forums.

Or in the Windows 10 IT Pro forums.

However, if I understand the question correctly:

If you are logged into a computer with a standard account which has no permission to install anything, and then run a program (say a downloaded installer) as a domain admin that program has domain admin permissions and could in fact perform any operation as if the domain admin is logged in on the pc.

Karl

---

When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book: Windows PowerShell 2.0 Bible
My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Answer 3

Agree, the user downloading would not have any impact on the user executing it.

 

 

---

Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]

Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.