Please take a moment to read http://bit.ly/demandglobalchange, to help share the message and support the initiative to tell our leaders to focus on addressing the global world problems, instead of complaining about the effects of their lack of leadership. Be a leader yourself, and share this with as many people as possible. #demandglobalchange // https://www.facebook.com/demandglobalchange



Please consider donating: https://www.corelan.be/index.php/donate/


4,797 views | This page as PDF

Run explorer window with administrator rights in Vista

Easy, don’t you think ?  Right click explorer(.exe), choose "run as administrator" and you’re set ?

  

Nope – doesn’t work !  And this is why

  

The UAC (User Account Control) feature in Vista provides a user with two tokens when he logs on… a token that is bound to his real user rights, and a token with non-admin rights.  In fact, at logon, all processes are launched with the non-admin right, including explorer.exe

(that’s why you may not have access to certain files or why you are getting UAC prompts all the time when moving/cutting/deleting/… files)

Explorer has some kind of ‘sticky’ behaviour. Once explorer.exe is launched, it never goes away. Every single explorer window that is opened, is just a child process of the parent explorer.exe. So even if you use the "run as administrator" function, it won’t work.

  

However, there is a workaround.

  

Open explorer, go to "Organize" and choose "Folder and Search Options"

Go to the "View" tabsheet

Enable the "Launch folder window in a separate process" option

Optionally, apply to Folders

Click "OK" to save

Now, when you right click explorer and choose to run it as administrator, it will work

(because the option that we’ve enabled will force explorer.exe to spawn a new process, which will inherit the administrator rights)

© 2008, Corelan Team (corelanc0d3r). All rights reserved.

Related Posts:

Comments are closed.

Corelan Live training

Since 2011, Corelan GCV has been teaching live win32 exploit dev classes at various security cons and private companies & organizations.

You can read more about the training and schedules here

Demand Global Change

The world needs your help !

Please take a few moments to read the "Demand Global Change Call For Action" document at
http://bit.ly/demandglobalchange
Read the full document at
http://bit.ly/demandglobalchange_full and share the message with as many people as possible.

Like the Facebook page, and SHARE it with everyone you know.



Donate

Want to support the Corelan Team community ? Click here to go to our donations page.

Want to donate BTC to Corelan Team?



Your donation will help funding server hosting.

Protected by Copyscape Web Plagiarism Tool

Corelan Team Merchandise

You can support Corelan Team by donating or purchasing items from the official Corelan Team merchandising store.

Corelan on IRC

You can chat with us and our friends on #corelan (freenode IRC)

Categories