Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Obtaining a list of all programs that are run with elevated privileges

01 Oct 2015   #1
sojkovec

Windows 7 Ultimate x64
 
 
Obtaining a list of all programs that are run with elevated privileges

Anybody has any idea, how to obtain a complete list of EXEs that have the setting "run as an administrator" enabled? Obviously checking them manually one by one isn't a solution. Just point me in general direction (registry path, group policies, file attribute...). I'm stuck. Thanks.


My System SpecsSystem Spec
.
01 Oct 2015   #2
LMiller7

Windows 7 Pro 64 bit
 
 

Welcome to the forum.

Most executable files, including exe, cpl, msc, and more, will have this option. The context menu provides the option based on the file extension. This includes old DOS executables that predate UAC.
My System SpecsSystem Spec
01 Oct 2015   #3
sojkovec

Windows 7 Ultimate x64
 
 

Thank you, I know that. But the setting does not modify the binary itself. It has to be saved somewhere and by that I do not mean a tick box in GUI, I mean where this mark is physically saved, e.g. some registry key, or within NTFS itself (like compression and/or encryption, etc.). That is what I need to know and am unable to google out.
My System SpecsSystem Spec
.

01 Oct 2015   #4
sojkovec

Windows 7 Ultimate x64
 
 

I decribe my problem more generally: I have a Win7 PC to fix, which after malware infection remains in a state when various executables have "elevated rights" option enabled. Randomly over all hard drive. That causes UAC prompt to pop up, when running Word, for example. I will not resort to turning UAC off because of security, nor can't I let it in this state either, for same reason. Manually unticking them all one-by-one would inflame my index finger.. :) So I am looking for some easy way, short of complete reinstall (which is not needed, PC is clean and runs fine, except for this).
My System SpecsSystem Spec
01 Oct 2015   #5
sojkovec

Windows 7 Ultimate x64
 
 

So, I have found it! How could I miss it? For info, it's here:
Code:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
for current user

and
Code:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
for all users. You can close this thread.
My System SpecsSystem Spec
01 Oct 2015   #6
Layback Bear

Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
 
 

Just a thought.

You might consider a Clean Install again. Any infection that has changed that many permission settings can be lingering in your system.

I know you posted your system is clean. I personally would not take the chance.
I would also change all passwords to everything. (Banking, credit cards ect.) With all those permissions changed, your passwords may already be gathered.

I would change the passwords using another known clean computer.
My System SpecsSystem Spec
Reply

 Obtaining a list of all programs that are run with elevated privileges




Thread Tools




Similar help and support threads
Thread Forum
How to run add remove programs as administrator (elevated)?
I want to uninstall my "Buggy" ESET Smart Security (ESS) v8 in Safe Mode, and get rid of all the drivers... (I am then going to try Norton IS 2017). ESET does Not offer an uninstall tool to do this (leaves umpteen drivers/files...), so I want to Run the Uninstaller as elevated Admin, and...
General Discussion
Built-in Administrator Account-enable elevated privileges
Hi to all I have recently taken delivery of a new computer which has WIN7 Pro SP1 as the OS, and after downloading all critical/important security updates I tried to run a few commands only to discover I did not have full administrator rights/privileges. After being somewhat led down the...
General Discussion
No administrator privileges in elevated command prompt
Hi, I'm trying to setup a WiFi Hotspot on my Laptop running Windows 7. When I enter the command: netsh wlan set hostednetwork mode=allow "ssid=myssid" "key=mykey” keyUsage=persistent in an elevated command prompt, it says: "You must run this command from a command prompt with administrator...
General Discussion
Auto start elevated programs
hello I don't know where to post this but I think it most probably belongs here... I use RivaTuner to overclock my Graphics Card but to apply these settings at startup it has to Autostart as an administrator. I always have to click on "Yes" to allow it which is quite annoying... I know there...
Software
Firefox elevated privileges required now?
I just formatted my windows 7 build 6801 and installed build 7000 and I have just restored my profile and plugins, everything from my previous windows install but when trying to start firefox from the startmenu nothing happens untill i right click and choose run as administrator and it seems i have...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 01:14.
Twitter Facebook Google+