Solved running a software that requires admin rights on a regular user.

[Shayx]

i have a FOSCAM cameras
and i donwloaded their software
i can not install it as a regular user so i installed it from admin account.
now i can't run the program on the regular user because it ask for admin and password.

is there any way to allow only this application to run with admin rights on the regular user?
i really don't want to give him admin rights.

 

[iko22]

Hello Shayx, do you know what version of the .net framework this software requires? If this program is an old software, then you might have to run the software in compatibility mode to avoid the admin challenge.

 

[samuria]

At a rough guess see who has rights on the software folder if admin owns set permissions to user or everyone

 

[Emma Yazz Aza]

Hello Shayx. This issue actually has a simple fix! So, in Windows, there's a built-in Administrator account (as most everyone knows.) If you want to easily allow someone to access a program without having to use admin privileges. You would do this by creating a shortcut (or right-clicking a current shortcut, followed by clicking "Properties" on it), and putting in:

C:\Windows\System32\runas.exe /user:ComputerName\UserName /savecred "...pathtofile"

So, for example: I changed my username for the Built-in Administrator account to Emma. For anyone who hasn't changed the name for the Built-in Administrator (in Computer Management or compmgmt.msc > Local Users and Groups > Users). My PC's ComputerName, which you can find by starting Windows Explorer (explorer.exe) and right-clicking This PC or Computer (differs from OS to OS) and looking under Computer Name. My code for VLC Media Player would be:

C:\Windows\System32\runas.exe /user:Emmas-PC\Emma /savecred "C:\Program Files\VideoLAN\VLC\vlc.exe".

Hope this helps, hope your issue gets solved,
Emma Yazz Aza

 

[Shayx]

thanks Emma it worked.

 

[abbeyon]

You can run it from the program files > properties of that program > in the advanced menu select run as admin click continue and you run program as admin...

 

[Alejandro85]

By doing so you are giving administrator rights to the user, by the means of this specific programs. It's the same security issue.

If the program ask for UAC elevation every single time it starts, I'm affraid that the program is either too demainding on its permissions or is simply broken. In any case the real solution is to look forward for a replacement.

 

[Emma Yazz Aza]

Hello Shayx. Please note that running this will give access to administrative rights for the user through whatever program they're using, as others have stated below. Be cautious of doing this for things like Windows Explorer alternatives and shell command line modules.

Happy this helped, happy your issue is solved,
Emma Yazz Aza

 

[Shayx]

it's a cameras managment software.
when the program starts there is a logon screen so the user goes into a limited user
that can only watch the cameras live and browse recordings...
don't know why it needs admin rights, maybe just bad coding.
don't see any security issue with this method.

thanks again.

 

[Alejandro85]

don't know why it needs admin rights, maybe just bad coding.

I also bet it's bad coding, after all, a camera management software should only require a network and pretty much nothing more locally, which shouldn't need local administrator privileges. Installation, of course, would require them, but only as a one-shot operation, not a permanent requirement.

don't see any security issue with this method.

There is a significant on, you're defeating the purpose of the standard user account. That concrete program is receiving administrator privileges, which, depending on the program itself, could allow the user to gain system-wide access. There are a number of things that can go wrong, for example, a bug in the software, or simply a open/save file dialog gives a mini-explorer window with elevated permissions, and something else on the machine might try to exploit that. Basically, you're giving admin permissions without writing the password.

The problem with that is that it defeats your very own requirement:

is there any way to allow only this application to run with admin rights on the regular user?

An educated regular user can gain admin access by exploiting this program.