Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET
Windows Vista

Bypass UAC using a Desktop Shortcut

Windows Vista has the built-in ability to automatically reduce the potential of security breaches in the system. It does that by automatically enabling a feature called User Account Control (or UAC for short). The UAC forces users that are part of the local administrators group to run like they were regular users with no administrative privileges. User Account Control provides security protection for system kernel, memory and registry from unauthorized access by programs or processes. You can read more about UAC on my What’s User Account Control in Windows Vista? article.

UAC can drive you crazy. It will bug you to the point where you’ll totally ignore it and automatically click to accept its prompts without giving it a second consideration, virtually rendering it useless. Or, you could simply disable it. You can read more about UAC on my How can I disable the User Account Control (UAC) feature on my Windows Vista computer? article.

While disabling UAC is not a hard task to accomplish, there is another method you can use to deal with it. In this guide, I will help tell you how to create a desktop shortcut for bypassing UAC for programs that require UAC Administrative Permissions, and allow standard users to run these programs without administrative access. You will be doing it by using a known bypass trick in Task Manager and a desktop shortcut. You will also be able to use this trick to launch a program from the Command Prompt or from scripts.

In order to do so, please follow these steps:

Sponsored Content

Say Goodbye to Traditional PC Lifecycle Management

Traditional IT tools, including Microsoft SCCM, Ghost Solution Suite, and KACE, often require considerable custom configurations by T3 technicians (an expensive and often elusive IT resource) to enable management of a hybrid onsite + remote workforce. In many cases, even with the best resources, organizations are finding that these on-premise tools simply cannot support remote endpoints consistently and reliably due to infrastructure limitations.

  1. Click on the Start button, type Task Scheduler in the “Start Search” box, then press Enter.
  2. Note: You can get to the Task Scheduler by using the Manage My Computer context menu from the “Computer” icon, by using the shortcut from the Administrative Tools folder, or by typing taskschd.msc in the Run box.

  3. In the Task Scheduler Management Console , on the Actions pane click Create Task.
  4. In the Create Task window, type in the name (and possibly the description) of the task.  Click to select the “Run With Highest Privileges” checkbox. You do not need to change any other settings.
  5. Note: Remember the name of the task as we will need it later.

  6. In the Actions tab click New.
  7. Browse for the program you want your standard users to run without requiring UAC.
  8. Click OK and you will see your task entered into the Actions tab.
  9. For laptop or portable computers that might be running on batteries, go to the Conditions tab and un-check the “Start the Task only when computer is Running on AC Power” check-box.
  10. Go to the Settings tab and check that the default check-boxes are selected. Click OK when done.
  11. Back in the Task Scheduler main window you will now see the new task listed under Scheduler Library with the status of “Ready”.
  12. Close Task Scheduler.
  13. Right-click an empty spot on your Desktop and select New > Shortcut.
  14. In the Create Shortcut window enter the following text:
  15. ​C:\Windows\System32\schtasks.exe /run /tn "TaskName"

    Where “TaskName” is the name of the task you chose, from step #3.

    Note: Include the quotation marks around the TaskName or it will fail to successfully run the task.

  16. Click Next and then enter a name for the shortcut. When done, click Finish.

Whenever you want to run the specified program, simply double-click on the shortcut you’ve created without requiring UAC prompts or complete Administrator access.

You can also further customize the shortcut with an icon or other settings if you wish.

You will need to repeat this  steps for any additional program you’ll want to use without the need to answer the UAC prompts.

Related Topics: