Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > microsoft.public.scripting.vbscript > #11685 > unrolled thread

VBS script / wmi security conf DACL

Started byemre.ytu@gmail.com
First post2017-05-22 07:51 -0700
Last post2017-05-24 16:03 +0700
Articles 11 — 3 participants

Back to article view | Back to microsoft.public.scripting.vbscript

Contents

  VBS script / wmi security conf DACL emre.ytu@gmail.com - 2017-05-22 07:51 -0700
    Re: VBS script / wmi security conf DACL "Dave \"Crash\" Dummy" <invalid@invalid.invalid> - 2017-05-22 10:56 -0400
      Re: VBS script / wmi security conf DACL emre.ytu@gmail.com - 2017-05-22 22:52 -0700
    Re: VBS script / wmi security conf DACL JJ <jj4public@vfemail.net> - 2017-05-23 03:10 +0700
      Re: VBS script / wmi security conf DACL emre.ytu@gmail.com - 2017-05-22 22:24 -0700
    Re: VBS script / wmi security conf DACL "Dave \"Crash\" Dummy" <invalid@invalid.invalid> - 2017-05-22 18:11 -0400
    Re: VBS script / wmi security conf DACL "Dave \"Crash\" Dummy" <invalid@invalid.invalid> - 2017-05-22 18:26 -0400
      Re: VBS script / wmi security conf DACL emre.ytu@gmail.com - 2017-05-22 22:27 -0700
        Re: VBS script / wmi security conf DACL JJ <jj4public@vfemail.net> - 2017-05-23 17:30 +0700
          Re: VBS script / wmi security conf DACL "Dave \"Crash\" Dummy" <invalid@invalid.invalid> - 2017-05-23 10:11 -0400
            Re: VBS script / wmi security conf DACL JJ <jj4public@vfemail.net> - 2017-05-24 16:03 +0700

#11685 — VBS script / wmi security conf DACL

Fromemre.ytu@gmail.com
Date2017-05-22 07:51 -0700
SubjectVBS script / wmi security conf DACL
Message-ID<5faa05a7-4c93-4564-8312-2e381aa529a5@googlegroups.com>
Hello,

I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.

https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/

https://www.youtube.com/watch?v=_e0ZrknsLFE

I did the same and generated script:

strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)

set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")

set security = namespace.get("__systemsecurity=@")

nStatus = security.setsd(strSD)

I get error below when I run as an admin:

Privilege not held
Line:7
Char:1
Source: SWbemObjectEx

Can you please help me on this?

Any alternative way that you will suggest would also be appreciated.

[toc] | [next] | [standalone]

#11686

From"Dave \"Crash\" Dummy" <invalid@invalid.invalid>
Date2017-05-22 10:56 -0400
Message-ID<ofuu0h$dg9$1@dont-email.me>
In reply to#11685
emre.ytu@gmail.com wrote:
> Hello,
> 
> I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> 
> https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> 
> https://www.youtube.com/watch?v=_e0ZrknsLFE
> 
> I did the same and generated script:
> 
> strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> 
> set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> 
> set security = namespace.get("__systemsecurity=@")
> 
> nStatus = security.setsd(strSD)
> 
> I get error below when I run as an admin:
> 
> Privilege not held
> Line:7
> Char:1
> Source: SWbemObjectEx
> 
> Can you please help me on this?
> 
> Any alternative way that you will suggest would also be appreciated.

What is "line 7?"
-- 
Crash

One man's weed is another man's wildflower.

[toc] | [prev] | [next] | [standalone]

#11692

Fromemre.ytu@gmail.com
Date2017-05-22 22:52 -0700
Message-ID<77437309-d3c4-46ce-b961-f53a8760c713@googlegroups.com>
In reply to#11686
On Monday, May 22, 2017 at 5:56:32 PM UTC+3, Dave "Crash" Dummy wrote:
> emre.ytu@gmail.com wrote:
> > Hello,
> > 
> > I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> > 
> > https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> > 
> > https://www.youtube.com/watch?v=_e0ZrknsLFE
> > 
> > I did the same and generated script:
> > 
> > strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> > 
> > set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> > 
> > set security = namespace.get("__systemsecurity=@")
> > 
> > nStatus = security.setsd(strSD)
> > 
> > I get error below when I run as an admin:
> > 
> > Privilege not held
> > Line:7
> > Char:1
> > Source: SWbemObjectEx
> > 
> > Can you please help me on this?
> > 
> > Any alternative way that you will suggest would also be appreciated.
> 
> What is "line 7?"
> -- 
> Crash
> 
> One man's weed is another man's wildflower.

Line 7 is "nStatus = security.setsd(strSD)"

[toc] | [prev] | [next] | [standalone]

#11687

FromJJ <jj4public@vfemail.net>
Date2017-05-23 03:10 +0700
Message-ID<1034zqqta66mf$.4aaza83unv4o$.dlg@40tude.net>
In reply to#11685
On Mon, 22 May 2017 07:51:37 -0700 (PDT), emre.ytu@gmail.com wrote:
> Hello,
> 
> I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> 
> https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> 
> https://www.youtube.com/watch?v=_e0ZrknsLFE
> 
> I did the same and generated script:
> 
> strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> 
> set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> 
> set security = namespace.get("__systemsecurity=@")
> 
> nStatus = security.setsd(strSD)
> 
> I get error below when I run as an admin:
> 
> Privilege not held
> Line:7
> Char:1
> Source: SWbemObjectEx
> 
> Can you please help me on this?
> 
> Any alternative way that you will suggest would also be appreciated.

That code works fine when run using admin in my system.
Are you sure you run it using admin privileges?

Try right-clicking the "Command Prompt" from the Start Menu, and choose "Run 
as administrator" from the popup menu. Then in that command prompt window, 
run the script by executing either CSCRIPT.EXE or WSCRIPT.EXE using the 
script file name as its argument.

If you simply type the script file name then press ENTER, WSCRIPT.EXE will 
be executed by the desktop shell, which doesn't have administrator 
privileges. A VBS file is not a Windows native program. It's a document, and 
it requires another program in order to run it (CSCRIPT.EXE or WSCRIPT.EXE).

[toc] | [prev] | [next] | [standalone]

#11690

Fromemre.ytu@gmail.com
Date2017-05-22 22:24 -0700
Message-ID<07de0c44-7edd-4d17-a309-569291354b55@googlegroups.com>
In reply to#11687
On Monday, May 22, 2017 at 11:10:22 PM UTC+3, JJ wrote:
> On Mon, 22 May 2017 07:51:37 -0700 (PDT), emre.ytu@gmail.com wrote:
> > Hello,
> > 
> > I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> > 
> > https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> > 
> > https://www.youtube.com/watch?v=_e0ZrknsLFE
> > 
> > I did the same and generated script:
> > 
> > strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> > 
> > set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> > 
> > set security = namespace.get("__systemsecurity=@")
> > 
> > nStatus = security.setsd(strSD)
> > 
> > I get error below when I run as an admin:
> > 
> > Privilege not held
> > Line:7
> > Char:1
> > Source: SWbemObjectEx
> > 
> > Can you please help me on this?
> > 
> > Any alternative way that you will suggest would also be appreciated.
> 
> That code works fine when run using admin in my system.
> Are you sure you run it using admin privileges?
> 
> Try right-clicking the "Command Prompt" from the Start Menu, and choose "Run 
> as administrator" from the popup menu. Then in that command prompt window, 
> run the script by executing either CSCRIPT.EXE or WSCRIPT.EXE using the 
> script file name as its argument.
> 
> If you simply type the script file name then press ENTER, WSCRIPT.EXE will 
> be executed by the desktop shell, which doesn't have administrator 
> privileges. A VBS file is not a Windows native program. It's a document, and 
> it requires another program in order to run it (CSCRIPT.EXE or WSCRIPT.EXE).

Hello JJ,

I have tried with both cscript and wscript (cmd opened as admin) but still same result. It is really weird that you are able to run same script successfully :S

[toc] | [prev] | [next] | [standalone]

#11688

From"Dave \"Crash\" Dummy" <invalid@invalid.invalid>
Date2017-05-22 18:11 -0400
Message-ID<ofvngs$f98$1@dont-email.me>
In reply to#11685
emre.ytu@gmail.com wrote:
> Hello,
> 
> I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> 
> https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> 
> https://www.youtube.com/watch?v=_e0ZrknsLFE
> 
> I did the same and generated script:
> 
> strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> 
> set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> 
> set security = namespace.get("__systemsecurity=@")
> 
> nStatus = security.setsd(strSD)
> 
> I get error below when I run as an admin:
> 
> Privilege not held
> Line:7
> Char:1
> Source: SWbemObjectEx

Put this code in the start of your script:

Set WshShell = WScript.CreateObject("WScript.Shell")
If WScript.Arguments.length = 0 Then
Set ObjShell = CreateObject("Shell.Application")
ObjShell.ShellExecute "wscript.exe", """" & _
WScript.ScriptFullName & """" &_
  " RunAsAdministrator", , "runas", 1
Else

Put your code here

End if
-- 
Crash

When it comes to texting, some people are all thumbs.

[toc] | [prev] | [next] | [standalone]

#11689

From"Dave \"Crash\" Dummy" <invalid@invalid.invalid>
Date2017-05-22 18:26 -0400
Message-ID<ofvobd$gt6$2@dont-email.me>
In reply to#11685
emre.ytu@gmail.com wrote:
> Hello,
> 
> I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> 
> https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> 
> https://www.youtube.com/watch?v=_e0ZrknsLFE
> 
> I did the same and generated script:
> 
> strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> 
> set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> 
> set security = namespace.get("__systemsecurity=@")
> 
> nStatus = security.setsd(strSD)
> 
> I get error below when I run as an admin:
> 
> Privilege not held
> Line:7
> Char:1
> Source: SWbemObjectEx

Put this code in the start of your script:

Set WshShell = WScript.CreateObject("WScript.Shell")
If WScript.Arguments.length = 0 Then
	Set ObjShell = CreateObject("Shell.Application")
	ObjShell.ShellExecute "wscript.exe", """" & _
	WScript.ScriptFullName & """" &_
	 " RunAsAdministrator", , "runas", 1
Else

	Put your code here

End if

-- 
Crash

Democracy is government by the basest emotions of slightly over half the 
population.

[toc] | [prev] | [next] | [standalone]

#11691

Fromemre.ytu@gmail.com
Date2017-05-22 22:27 -0700
Message-ID<dc13bf59-b796-4611-8535-8fca5c2e67cf@googlegroups.com>
In reply to#11689
On Tuesday, May 23, 2017 at 1:26:03 AM UTC+3, Dave "Crash" Dummy wrote:
> emre.ytu@gmail.com wrote:
> > Hello,
> > 
> > I am trying to write a vbs script that configures WMI security. I want to use byte stream example in link below.
> > 
> > https://blogs.msdn.microsoft.com/spatdsg/2007/11/21/set-wmi-namespace-security-via-gpo-script/
> > 
> > https://www.youtube.com/watch?v=_e0ZrknsLFE
> > 
> > I did the same and generated script:
> > 
> > strSD = array(1,0,20,130,192,0,0,0,208,0,0,0,20,0,0,0,64,0,0,0,2,0,44,0,1,0,0,0,2,194,36,0,31,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,2,0,128,0,5,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,11,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,19,0,0,0,0,2,20,0,19,0,0,0,1,1,0,0,0,0,0,5,20,0,0,0,0,2,24,0,63,0,6,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,0,2,36,0,63,0,6,0,1,5,0,0,0,0,0,5,21,0,0,0,91,16,155,64,69,109,31,3,188,108,130,0,191,80,2,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0,1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0)
> > 
> > set namespace = createobject("wbemscripting.swbemlocator").connectserver(,"root")
> > 
> > set security = namespace.get("__systemsecurity=@")
> > 
> > nStatus = security.setsd(strSD)
> > 
> > I get error below when I run as an admin:
> > 
> > Privilege not held
> > Line:7
> > Char:1
> > Source: SWbemObjectEx
> 
> Put this code in the start of your script:
> 
> Set WshShell = WScript.CreateObject("WScript.Shell")
> If WScript.Arguments.length = 0 Then
> 	Set ObjShell = CreateObject("Shell.Application")
> 	ObjShell.ShellExecute "wscript.exe", """" & _
> 	WScript.ScriptFullName & """" &_
> 	 " RunAsAdministrator", , "runas", 1
> Else
> 
> 	Put your code here
> 
> End if
> 
> -- 
> Crash
> 
> Democracy is government by the basest emotions of slightly over half the 
> population.

Hello Dave,

I have updated my code just like you said but I still get error.

Privilege Not Held
Line 15
Char 2

which is pointing the line starts with "nStatus"

[toc] | [prev] | [next] | [standalone]

#11693

FromJJ <jj4public@vfemail.net>
Date2017-05-23 17:30 +0700
Message-ID<cajfanflb556.51knacaae7yf.dlg@40tude.net>
In reply to#11691
On Mon, 22 May 2017 22:27:24 -0700 (PDT), emre.ytu@gmail.com wrote:
> Hello Dave,
> 
> I have updated my code just like you said but I still get error.
> 
> Privilege Not Held
> Line 15
> Char 2
> 
> which is pointing the line starts with "nStatus"

Looks like some internal things has been tampered with.
Or the access is blocked by an anti virus / security suite software.

[toc] | [prev] | [next] | [standalone]

#11694

From"Dave \"Crash\" Dummy" <invalid@invalid.invalid>
Date2017-05-23 10:11 -0400
Message-ID<og1fno$ihd$1@dont-email.me>
In reply to#11693
JJ wrote:
> On Mon, 22 May 2017 22:27:24 -0700 (PDT), emre.ytu@gmail.com wrote:
>> Hello Dave,
>> 
>> I have updated my code just like you said but I still get error.
>> 
>> Privilege Not Held Line 15 Char 2
>> 
>> which is pointing the line starts with "nStatus"
> 
> Looks like some internal things has been tampered with. Or the access
> is blocked by an anti virus / security suite software.

The only other thing I can think of is that he is not logged in as a
user with administrator privileges.
-- 
Crash

"The unexamined life is not worth living."
~ Socrates ~

[toc] | [prev] | [next] | [standalone]

#11695

FromJJ <jj4public@vfemail.net>
Date2017-05-24 16:03 +0700
Message-ID<vpfum3dpm9gd$.1lgvbbop1obpn.dlg@40tude.net>
In reply to#11694
On Tue, 23 May 2017 10:11:20 -0400, Dave "Crash" Dummy wrote:
> 
> The only other thing I can think of is that he is not logged in as a
> user with administrator privileges.

The WMI SetSD method is only available in Vista+, so that assures that he's
using a system with UAC. And under Vista+, even a non Administrator logged
on user (i.e. doesn't belong to the Administrators group) can virtually have
admin privileges assuming that the user passed the UAC prompt. In this case,
the elevated program is executed using other account which belong to the
Administrators group (UAC will prompt for credentials of other admin
account). And if a system has no account which belong to the Administrators
group (or has but none is enabled), no user will be able to pass the UAC
prompt (none will ever virtually have admin privileges).

[toc] | [prev] | [standalone]

Back to top | Article view | microsoft.public.scripting.vbscript

csiph-web