Technoloxy

Daily Source of Tech

Tutorials

Why run cmd as administrator? | UAC, Integrity level & Access Tokens

Administrator

Administrator

Ever seen a new application giving you pop ups to give it access to different kinds of files in your computer? It is asking because the files it is trying to access has a higher privilege that its current privilege. Today, We will be covering UAC, integrity privilege and access token while answering why you might need to run cmd as an administrator.

UAC (User Account Control)

Pop-ups/prompts given to us are Windows way of asking whether we should give access to applications asking for access. You can control the pop-ups by viewing the UAC(User Account Control) settings by changing the notification levels.

UAC

Pop-ups are like apps asking for privilege to edit/use your files. Sometimes we might want to allow the app to have access whereas other times we might not want to allow them, especially if they are malware. There are integrity levels set by MS in default such that not all access is granted to everyone.

Integrity Levels

Different types of integrity levels:

  • Untrusted Integrity
  • Low Integrity
  • Medium Integrity
  • High Integrity
  • System Integrity
  • Trusted Installer

What are these integrity levels?

Untrusted Integrity are given to applications that are not authentic. Low Integrity are given to browsers. Medium Integrity are for us users. High Integrity is administrator level. System Integrity and Trusted Installer can be used by MS only.

Important files have requirements of access. For example, every files contain access token which has an integrity level requirement. If the integrity level requirement is High Integrity then it means all levels below it can not access it unless they have admin privileges.

Read more on integrity levels

Remember: MS in default does not recommend you to use admin privileges due to potential exploits. So, give admin level privilege to applications you trust.

Before, we answer and summarize our topic, lets see different ways we could open command prompt.

Ways to open cmd as administrator

Step 1: Open cmd normally without any administrator privilege. You need administrator password for this. Type in the following code to open another window to run as administrator.

runas /user:administrator "C:\WINDOWS\system32\cmd.exe"

cmd admin

Step 2: Open windows search box in bottom left corner. Search “cmd”, right click and select app to run as administrator.

cmd admin

Step 3: Press “ windows key + r” to open run box > Type “cmd” > Press “control + shift + enter”. (Accept the prompted access)

popup uac

Why do we need admin privileges in cmd?

Finally, we need admin privileges to counter these problems of integrity levels set by MS while accessing different types of files through cmd. Without admin privileges we are unable to edit, execute and view files depending on the access token and it’s integrity level requirements. Remember with admin privilege you will have unrestricted access. Therefore, it might be better to use it minimally. 

Read our other cmd tutorials!

Comments (14)

  1. Accessed on June 8, 2007. buy real viagra online Accessed on June 8,
    2007.

  2. This blog was… how do I say it? Relevant!! Finally I have found something which helped me. Kudos!

  3. I enjoy, cause I discovered exactly what I was looking
    for. You have ended my 4 day lengthy hunt! God Bless you man.
    Have a nice day. Bye

  4. Hi, of course this paragraph is in fact nice and
    I have learned lot of things from it about blogging.
    thanks.

  5. I’m not sure why but this weblog is loading extremely slow for me.
    Is anyone else having this issue or is it a issue on my end?
    I’ll check back later on and see if the problem still exists.

  6. Very rapidly this site will be famous amid all blogging viewers, due to it’s good posts adreamoftrains web hosting
    reviews

  7. Thanks for another informative site. Where else may just I am getting that kind of info written in such an ideal way?
    I’ve a undertaking that I’m simply now running on, and I have been at the glance out for such info.

  8. This information is priceless. Where can I find out more?

  9. What’s up to every one, the contents existing at this web
    page are in fact remarkable for people experience, well, keep up
    the good work fellows.

  10. Greetings from Colorado! I’m bored at work so I decided to check out your website on my iphone during lunch break.
    I love the knowledge you provide here and
    can’t wait to take a look when I get home.
    I’m shocked at how quick your blog loaded on my phone ..

    I’m not even using WIFI, just 3G .. Anyhow, awesome site!

  11. It is in point of fact a nice and useful piece of info. I’m
    happy that you simply shared this helpful info with us.
    Please keep us up to date like this. Thanks for sharing.

  12. Hello, Neat post. There’s a problem together with your website
    in web explorer, could test this? IE still is the market leader and a huge component
    of other people will miss your great writing because of this problem.

Comment here