Run batch file rename a folder as administrator!

Paul Black said:

Thanks again iko22,

This is not critical BTW and is not networked!

The idea behind this is I want to upload a batch file that members can use. It has a menu. I want them to be able to run the menu items. i.e. If they wanted to run SFC, then I thought it would be a good idea to rename the CBS folder to CBS_OLD first for example. I just wondered if there was an easy way to get the code to run with administrator rights.

Thanks.

You're trying to circumvent win security protocol. Batch file run from guest cmd & elevate guest to admin rights?
Don't believe that's possible!
How to open an elevated cmd using command line for Windows ...
#62 green check

Hi Snick,

Snick said:

You're trying to circumvent win security protocol. Batch file run from guest cmd & elevate guest to admin rights?
Don't believe that's possible!
How to open an elevated cmd using command line for Windows ...
#62 green check

I didn't think it was but I thought I would ask!

What does #62 green check mean?

Would opening PowerShell from within the batch file and performing the processes [then closing PowerShell] overcome the administrator restrictions?

I would assume that it doesn't!

No joy? I'd thought you'd have this up and running by now! I did a bit more homework on the two commands, and I tried this on a folder called Demo, and it seems to work perfectly.

Code:

RUNAS /profile /user:user1 "iCACLS c:\users\user1\desktop\demo /deny user1:(OI)(CI)F"
RUNAS /profile /user:user1 "iCACLS c:\users\user1\desktop\demo /grant user1:(OI)(CI)F"

This returns success on mine, so I'd assume it would also work on c:\windows\logs\cbs on your computer. Assume user1 has admin rights.

I think @Snick is correct, you cannot run an elevated command prompt from a batch file. This example does not attempt to break that restriction.

Hi iko22,

iko22 said:

No joy? I'd thought you'd have this up and running by now!

I have had limited time to spend on this for the last couple of days, but I will get around to it this afternoon, hopefully!

iko22 said:

I think @Snick is correct, you cannot run an elevated command prompt from a batch file. This example does not attempt to break that restriction.

That was what I thought, but I wondered if there was a clever workaround, obviously not, which makes sense because it is to keep the integrity of the system secure!

Thanks again.

Hi iko22,

iko22 said:

No joy? I'd thought you'd have this up and running by now! I did a bit more homework on the two commands, and I tried this on a folder called Demo, and it seems to work perfectly.

Code:

RUNAS /profile /user:user1 "iCACLS c:\users\user1\desktop\demo /deny user1:(OI)(CI)F"
RUNAS /profile /user:user1 "iCACLS c:\users\user1\desktop\demo /grant user1:(OI)(CI)F"

No go I'm afraid!

Says error with RUNAS and I can't leave the password blank [even though it is not passworded]!

I will try and have a better look later.

UPDATE:

I ran this...

Code:

echo.
net stop wuauserv
icacls "c:\windows\logs\cbs" /grant system-admin:(OI)(CI)F /T
ren c:\windows\Logs\CBS\ c:\windows\Logs\CBS_OLD\
net start wuauserv
pause

...and got this...



Thanks in advance.

Hi iko22,

iko22 said:

The syntax for the REN statement says you are trying to RENAME the entire folder. DO you not want to rename the CBS.log within the CBS folder?

Yes. I would however, also find it useful to be able to rename the parent folder [CBS] if I so wished.

I was trying out both, hence the confusion!

Well, my reference to #62 green was the response number that was marked with a green check-mark.
It's not there anymore. Many other responses not there either, must be admin vetting.
The gist of the response was that you can't elevate from guest to admin from within the guest process. Don't recall who claimed to be the respondent.