How to set up elevated process to run at user logon?

lx07 · 23 Mar 2017

f14tomcat said:

These two lines from the tutorial tell me only an Admin could add/delete/modify these entries, and the standard user would have no input or choice....it would just run.

Well, I just tested it to be sure (you could have tested it yourself before positing it as a solution I guess but never mind).

It would have been cute but it doesn't actually work - it works on an administrator account and not on a standard account.

So, no - there is no getting around Windows security that way. As per MS security you can't run elevated process under a standard account at startup and this method is no different.

Even hacky things like this fileless-uac-bypass-using-eventvwr-exe-and-registry-hijacking require a Admin account to work.

f14tomcat · 23 Mar 2017

lx07 said:

Well, I just tested it to be sure (you could have tested it before positing a solution I guess but never mind).

It would have been a cute solution but it doesn't actually work - It works on an administrator account and not on a standard account.

So, no. No getting around Windows security that way. As per MS security you can't run elevated process under a standard account at startup and this is no different.

Even hacky things like this fileless-uac-bypass-using-eventvwr-exe-and-registry-hijacking require a Admin account to work.

Thanks for testing in your environment. Just to clarify.....I did NOT post this as a solution. Only a suggestion to try. The OP hasn't even had a chance to read these posts yet. It may give him an idea of how to proceed, thinking of alternatives, other approaches.

That's why I suggested the Start Folder using Shawn's tut.

I'm only offering an alternative way of trying it to see if it fits his needs

Please give the OP the opportunity to respond before declaring it unworkable. Your first comment was totally unnecessary.

lx07 · 23 Mar 2017

f14tomcat said:

Your first comment was totally unnecessary.

Don't get the hump. It was a good enough idea. I tried it as it as I was interested to see if you'd found a workaround. It just so happens the OS blocks it (as it should).

f14tomcat · 23 Mar 2017

lx07 said:

Don't get the hump. It was a good enough idea. I tried it as it as I was interested to see if you'd found a workaround. It just so happens the OS blocks it (as it should).

Not getting the "hump" as you say. This is a public forum.

ahmd · 23 Mar 2017

Thank you for trying to help guys. And no, that approach with the start folder didn't work. Neither did putting it into the HKCU\Software\Microsoft\Windows\CurrentVersion\Run key, I found elsewhere.

The sad truth about this is that any malware could easily bypass this restriction by installing itself as a service. I on the other hand would not be able to run this program as such. I tried and it just hangs up taking up CPU.

Otherwise all other approaches bring it back to the manual solution of clicking something.

I appreciate your sarcasm about docking someone's pay for not clicking the button. But as I said earlier, I'm trying to help and not hurt.

Lastly, about rewriting this executable. Yes, it would probably fix it. Although as you can imagine would never happen. We did not develop it in-house and it would cost many and many thousands of $$ to do, which the owner of the company would never go for.

So I guess it's back to clicking the button...

PS. Unless I find some 3rd party program that would do it for me.