0

Is there a way to give a standard user the ability to run task manager as a admin without allowing the user to run anything else as an admin?(Right now, I have to run command prompt with admin privileges,enter the admin password in the window that pops up and then type in taskmgr to run task manager as admin. Is there a way to shorten this process?)

John
  • 171
  • 3
  • 6
  • 17
  • I will edit this if I must, but I am a little busy sometimes so I won't be able to make this question more clear very quickly. (Within 24 hours I will have to to edit the question.) – John Aug 17 '15 at 12:58
  • Short answer. No. If they can run Task Manager as Admin, they can launch ANY TASK as admin. :) If you're annoyed by those prompts, why not turn down UAC's prompting? – Ƭᴇcʜιᴇ007 Aug 17 '15 at 12:58
  • I just want to give the standard user a few rights, such as running task manager as admin, but nothing else, is that impossible? – John Aug 17 '15 at 13:19
  • They should be able to start Task Manager without a prompt, they just won't be able to see or interact with any processes other than their own. To do that, they'd need system administrator rights. – Ƭᴇcʜιᴇ007 Aug 17 '15 at 13:27
  • I would want to let standard users start task manager with admin rights but nothing else with admin rights. – John Aug 17 '15 at 13:37
  • @John You want to let standard users just start task manager and handle their own processes, not granting full admin rights, like Windows 7? If so `set __COMPAT_LAYER=RUNASINVOKER&& start "" taskmgr` might work. – Gustavo Rodrigues Feb 06 '20 at 01:41

1 Answers1

1

This is not possible, if you could do that, the whole Windows security system would be useless.

As soon as the user has access to the first elevated process, he could start many other elevated processes and do anything on the machine.

The whole point of being a standard user is to not be able to do certain things.

Just keep your elevated command line open and run programs from there, or use a different elevated launcher, that means you are only asked for the admin password once per session.

Peter Hahndorf
  • 13,370
  • 9
  • 51
  • 67
  • An administrator can use a scheduled task for this. If you're logged on as an elevated administrator, you can create a task that runs interactively "with highest privileges", i.e. elevated with high integrity. schtasks.exe can manually run the task without a prompt for consent, even from the administrator's UAC-restricted standard logon. – Eryk Sun Aug 14 '17 at 07:18
  • This used to be possible with the old version of task manager. So security isn't really the cause here, but rather, they removed this feature. – fjch1997 Aug 29 '19 at 16:39