Ubetcha Ad Banner

Please visit our sponsors :
Support my blog please, click here

Thursday 8 September 2016

Fed up with UAC upon boot?

O.K, so your security savvy, you've got two accounts on your Windows installation. A limited account for everyday use, which logs in automatically and a password protected administrator account for when you need it.

Also you have some program in your startup folder which requires user account control (UAC) to proceed, but because your in a limited Windows account, your prompted for the password every startup.

So this article is a quick demonstration on how you can avoid writing the password in every time. A good example of this happening is when you want to load Speedfan from a limited account upon startup, and will serve as my working example.

First up you need to create our first batch file (.BAT) to launch your request. I created mine in my limited user account folder (C:\Users\Limited\). The easiest way to creating a .BAT file is using Notepad and just change the 'Save as type' from .TXT to 'All Files' then add .BAT to the end of the filename.


We want this file to call our second batch file but to load it as from our administrator account, so within our first batch file we need to write:


Of course substitute ADMINACC for the name of your own administrator account. The first line of text stops the output echoing back to the screen, whilst the second line calls our second batch file which has the commands to begin the Speedfan process but running it from our administrators account. The savecred means save credentials and after you first input the password you will never have to re-enter it again.

Our second batch file Speedfan.BAT is located in the same directory and reads as follows:


Written in pigeon English, the second line starts the Speedfan executable using the older directory structure as .BAT files aren't very good at dealing with spaces in the directory structure.

After you have created and saved both of these two batch files right click on the first one and choose 'Send To' then 'Desktop (create Shortcut)', finally drag this shortcut into your Startup folder and that everything finished.

Speedfan will now startup and run even in a non administrator account without asking for a password every time. (You will have to click OK to run it but you wont have to keep typing in the password)

Yes, you could disable UAC, but your security savvy right?!

UPDATE 17/01/2020 :

Whilst using the same principles as written above I've improved this slightly and allowing multiple items to load. Say you have two UAC alerts on boot and you want to incorporate both of these.

First off I created a new directory, C:\Windows\LogOn - doing this alleviates problems with Windows User Accounts and copied the related files into this new directory.

Initially I only had Speedfan.bat but then I created a second file called Razor.bat (for my Razor mouse)



Literally all that is contained within these files is the basic command to load the executable file

Where the magic happens is the main ElevatedRun.bat file, which once created you need to add into your Startup folder.




Basically it asks you if you want to load a specific program or not!

I hope this update helps some of you?


No comments:

Post a Comment