What does running software with administrative rights mean?

The familiar readers of TipsMake.com are probably no stranger to opening software with administrative rights, something that you probably still do everyday. But let's learn more about why to do so and when you ask the OS to run the software with administrative rights, what happens to Windows?

Thanks to switching from Windows XP to Vista, you were introduced to User Account Control (UAC) and Mandatory Intgrity Control (MIC). The security feature in this OS will open a notification when software changes the system and is also the key when the software needs to gain access.

Notice of the right to change the system for the software

When logging in Windows, the account will be given a code that contains identifying information including user groups and priorities such as reading, writing, and executing. In the information that has an integrity level (integrity level) used by OS to identify the file, whether the registry key is secure and inform the user when installing or separating the process from unnecessary access file system.

User Account Control

The Windows Mandatory Integrity Control mechanism (MIC) has at least 6 integrity levels: unreliable, low, medium, high, system and reliable.

By default, the average user will have an average, which is the highest level possible to create the process when opening the executable file without upgrading permissions with the administrator's password.

When right-clicking and selecting 'Run as administrator', this process will start with administrator privileges, giving higher permissions to features that may require deeper access to files in Windows.

Integrity levels in Windows:

1. Unreliable: anonymous processes.
2. Low: commonly used for web software like browsers.
3. Medium: for normal users, most objects.
4. High: access rights at the administrative level, often need to upgrade.
5. System: for core and core Windows services.
6. Reliable: for system components, Windows Updates.

The process that begins when opening an EXE file with an average Windows account will have that level of integrity, unless the executable file is set to a lower level or the developer encourages a low level of access, avoiding the The installation requires a high level to prevent unauthenticated code (malware) from gaining root access.

The processes run on the computer

Minimum permissions are applied to Windows admin accounts, there will be either standard or administrative rights after logging in, using standard / medium access when possible, instead of using a high level than.

Although Microsoft recommends that you do not run the software with administrative rights and give them high access without a reasonable reason, there must be new data added to Program Files to install the new software, ie UAC must be turned on, while software like AutoHotkey often needs to be upgraded to work properly.

If you do not know how to open the software using administrative rights, please refer to the article 4 ways to run the software using administrative rights in Windows. Although Microsoft 's philosophy is to limit as many rights as possible, it is not recommended to set up software to run with administrative rights. But sometimes this is useful when the software always needs permission, and you don't want to use it every time you open it.

1. How to launch Admin rights application for User account in Windows?
2. Activate Standard User to run the program under Admin without a password

How to force the software to always run with administrative rights

Always run as administrator via shortcut: Right-click the shortcut> select Shortcut tab> Advanced > Select the Run as administrator dialog box.

You can create a shortcut by right-clicking on the EXE file, if you copy the shortcut to C: UsersTechSpotAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup, the software will automatically open with Windows when you log in.

Always run with administrative rights through Compatibility Properties : right-click EXE> Properties> select Compatibility tab> select the Run this program dialog box as an administrator.

Always run as administrator privileges through the Registry Editor:

1. Go to HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionAppCompatFlagsLayers
2. Without Layers, right click on AppCompatFlags and add a new key named Layers.
3. Right-click on the Layers (in the folder or control panel) and create String Value.
4. Name the value according to the full path of the EXE file.
5. Set the value data to ~ RUNASADMIN.

Always run with administrative rights through the Registry Editor

A few other tricks

Third-party software such as MicEnum will create a Windows file / directory list and their integrity level, including the ability to set a new integrity level, browse as directory and registry.

Process Explorer can also display integrity when right-clicking on horizontal walls with CPU, Private Bytes . and opening Properties.

When installing a new Windows version, the first user will have an administrator account, then only at the standard level. By default, the available admin account will be disabled. You can turn it back on to open this account as soon as you log on to Windows by entering the following line into the Command Prompt (use 'no' to disable it). Net user administrator / active: yes.

Microsoft also has utilities like Elevation PowerToys or PsExec to get administrative rights.

See more:

1. Techniques for decentralizing Window administration
2. How to open the pin application on the Taskbar Administrator with Windows 10
3. Losing Admin permissions on Windows 10 / 8.1, this is a fix