Run a specific application as administrator from user to limit administrator rights

Start application as administrator, under system account with highest privileges and bypass the UAC or use other different credentials

If you understand the simple method of RunAsRob, it is easy to integrate it very effective for a lot of various purposes on a single workstation, up to a large domain forest to grant admin privileges to particular applications or folders, instead to users.
Run as system, run as administrator, run as service or run as another user are the four different start possibilities.
Each of the four parts has its own advantages depend on your environment, program, purpose and aim.

• Allow standard users to execute a program, which need administrator rights.
• Distribute certain applications or updates by simply copying the setup file into a directory with read permissions for users
  who can install this provided software themselves via RunAsRob, after this directory is authorized via RunAsAdmin.
• Delegate administrative tasks to limited users or any other specific user group,
  by authorizing this tasks in RunAsAdmin, combined with folder permissions for this task to specific group.
• Bypass UAC dialog by starting the application under system account.
• Launch an application with temporary administrator rights for a limited user to a specific program.
  By this option, the limited account use its own window profile and setting like printers, shares... to start the application with administrative rights.
• Run application as service after system start with highest privileges, before a user is logged in.
• Start a script as admin with elevated system privileges.
• . . .

See below for details, examples and how to use each of the four parts of RunAsRob.

---

1 Run application under system account.

Configure software and folders, their contents are allowed to run under system account to bypass the uac prompt and with the highest privileges on a local computer, more rights than administrators.

Quick guide:

1. Unpack Runasrob.zip, start RunAsAdmin.exe and press button >> install RunasRob << to install the service of RunAsRob.
2. Add application you want to start with system rights by button >> Add application <<.
3. Select  this application on listbox in RunAsAdmin and create a shortcut by >> Create shortcut <<.
4. Use this shortcut for limited user to run the selected program with system rights.
5. If you need, you can restrict the access for a group of users by settings folder permissions of this directory.
6. By using a network share, the computer account of this machine must have read rights to this share. In Domain it is the group domain computers.
7. Video example

---

2 Run application as administrator

Configure software and folders, their contents are allowed to start with administrator rights by a standard user with environment of this limited account.

Quick guide:

1. Start RunasAdmin.exe from RunasRob folder.
2. Press button >> Install RunasRob<< to install RunasRob Service.
3. Set the option >> Logon as << to administrator.
4. Press button >> Add application << and select the program you want to authorize.
5. Select this application in the listbox and press button >> Create shortcut <<.
6. By created shortcut, a limited user can now use this shortcut to call selected application as administrator.
7. Before the application starts, the user will be asked for his credentials
   to run it under his own account and profile as a member of the local administrator group.
8. Video example

---

3 Run application as service

Run application as service after system start with highest privileges, if a user logs in or not.

• Helping to run background jobs like monitoring tasks, copy jobs or check routines on a computer.
• Usable if application must be running with highest privileges and no user action is required.
• It must be a program which finalize its job without any user input, because application running as service in background.

Quick guide:

1. Start RunAsService.exe as a local administrator.
2. Press button >> Install RunAsRob <<.
3. Select application you want to run as service by >> Add application <<.
4. Finished.
5. After each restart of system, now the application is running as service with system privileges, whether a user is logged in or not.
6. Video example

---

4 Run application as another user

Run application as different user without entering the password. The credentials are stored in an encrypted file.

• Run an application as administrator or any other account without installing the service of RunAsRob.
• Delegate particular administrative tasks to limited users, by sending or provide them an encrypted file, in which the program for this job is authorized.
• Distribute software by providing an encrypted file, in which the path of the setup.exe and credentials are saved, to run program as administrator.

Quick guide:

Run application under a limited user with credentials of an administrator account without installing RunAsRob service.

1. Start RunasRob.exe and press enter to open the configuration window for encrypted files.
2. In the appeared window select the path\Application.exe you want to run over RunAsRob and
3. Enter the administrator authentication you want to use for it by fill out the authentication fields.
4. Store your encrypted file over>> Save crypt file <<
5. Check your generated crypt file over the button >>Test crypt file << and your application should be start under the settings you entered in the configuration program.
6. You are finished. Close this configuration window.
7. Start >> yourCryptFile.xus << by drag and drop over RunAsRob.exe or call your encrypted file over a shortcut, batchfile or similar with following command:
   >> runasrob.exe /cryptfile:”c:\yourpath\YourCryptFile.xus” <
8. Video example

---

Comparison table with characteristics, advantages and disadvantages of the four parts RunAsRob and RunAsSpc on

https://robotronic.net/runasrobdetailsen.html#Comparison

---

Date: 2024-08-26
Data protection
Imprint