General Create Elevated Shortcut without UAC prompt in Windows 11

Sammy888 · Dec 29, 2022

Brink said:
You really don't want to use an elevated account for everyday usage since everything would always run with elevated rights (run as administrator). This could be a security risk if something (ex: malware) tries to run elevated without getting a UAC prompt to approve first.

For that app, you could use this in step 8:

/c start "App Name" "C:\Program Files\RandomNamedirectory\Anyapplication.exe"

Hi Brink. Much thanks.

You're absolutely correct. I don't want to use the administrative elevated (no-prompt) for all applications, just a few that I used many times a day and I know are "safe" and won't be exploited.

As you haven't mentioned anything about bypassing the elevated UAC prompt for .bat files, can I assume that's not possible?

Brink · Dec 29, 2022

Sammy888 said:
Hi Brink. Much thanks.

You're absolutely correct. I don't want to use the administrative elevated (no-prompt) for all applications, just a few that I used many times a day and I know are "safe" and won't be exploited.

As you haven't mentioned anything about bypassing the elevated UAC prompt for .bat files, can I assume that's not possible?

You could run the commands used in the BAT in the elevated task with the elevated shortcut for that purpose, but directly with a BAT.

Sammy888 · Dec 29, 2022

Brink said:
You could run the commands used in the BAT in the elevated task with the elevated shortcut for that purpose, but directly with a BAT.

Thanks. I'm having trouble relating without an example/illustration.

For instance: this is the contents of one my .bat files which must be run as admin:

echo Script to delete file
del "C:\Users\USER\AppData\Roaming\RandomApplication\Logs\*.*" /s /f /q
echo off
echo on
del "C:\Users\USER\AppData\Roaming\RandomApplication\Local Folders\folders.dat" /s /f /q
echo Done!

Brink · Dec 30, 2022

Sammy888 said:
Thanks. I'm having trouble relating without an example/illustration.

For instance: this is the contents of one my .bat files which must be run as admin:

echo Script to delete file
del "C:\Users\USER\AppData\Roaming\RandomApplication\Logs\*.*" /s /f /q
echo off
echo on
del "C:\Users\USER\AppData\Roaming\RandomApplication\Local Folders\folders.dat" /s /f /q
echo Done!

You'd have to merge it all into one single line to be able to use it in Task Scheduler for the elevated shortcut.

Sammy888 · Dec 30, 2022

Brink said:
You'd have to merge it all into one single line to be able to use it in Task Scheduler for the elevated shortcut.

Hi Shawn,

Unfortun0ately that didn't work. This is the script I entered:
/c start "Randombat" "echo Script to delete file del "C:\Users\USER\AppData\Roaming\Application\Logs\*.*" /s /f /q echo off echo on del "C:\Users\USER\AppData\Roaming\Application\Local Folders\folders.dat" /s /f /q

Sammy888 · Dec 30, 2022

garlin said:
sfc /scannow will restore the original ownership and permissions for Windows files which were installed.
That's part of its job, besides replacing corrupted or missing files.

Are you suggesting that SFC will remove the elevated tasks created by the user?

garlin · Dec 30, 2022

No, SFC won't touch user-created files, tasks, or added settings.

But safron updated his Windows PowerShell ISE.lnk shortcut, and that's a file Windows installed. Therefore, it would detect this change and revert it to the original version.

You can modify any Windows file or setting you want. SFC can only perform an all-or-nothing repair, by resetting the files it cares about back to the installation defaults. This why blind insistence on "sfc /scannow" is not really a good idea. It can undoes good changes, besides the bad ones.

Sammy888 · Dec 30, 2022

garlin said:
This why blind insistence on "sfc /scannow" is not really a good idea. It can undoes good changes, besides the bad ones.

In my experience (I think I posted this in another thread), I found SFC useless. Every once in a while I run the scan and it typically doesn't find any issue (when there have been) and the only issue it detects with my bluetooth driver which is disabled. Aside from that, it's not helpful to me (anymore).

HodorongTronc · Jan 28, 2023

only if you disable UAC can open everything without admin privileges ?

Brink · Jan 28, 2023

HodorongTronc said:
only if you disable UAC can open everything without admin privileges ?

Hello,

Creating an elevated shortcut does not disable UAC. It only bypasses UAC instead.

It allows an administrator to "Run as administrator" the shortcut without being prompted by UAC.

A standard user will not be able to use the elevated shortcut.

PilgrimLyieu · Jul 22, 2023

Useful tutorial. However I've encountered an issue. The details are in this post thread, Could you so please to help me with it?

https://www.elevenforum.com/t/cannot-create-task-in-task-scheduler.16523/

Brink · Jul 22, 2023

PilgrimLyieu said:
Useful tutorial. However I've encountered an issue. The details are in this post thread, Could you so please to help me with it?

https://www.elevenforum.com/t/cannot-create-task-in-task-scheduler.16523/

Posted something in your thread.

Cannot create task in Task Scheduler

Hello everyone, I've encountered a troublesome issue and I'm expecting somebody to help me. I wanted to create a UAC whitelist for trusted software(such as Everything, AutoHotkey) to avoid the annoying UAC window. And I found a way using task scheduler. Here's my procedure. I'm in...

www.elevenforum.com

Sammy888 · Aug 14, 2023

Folks, there's a really useful utility on Sordum's site called "Skip UAC Prompt". I suggest you read the comments below the write-up, and there's also a video. It seems to work quite well so far. You just need to use the utility to create a shortcut to the application you want to bypass UAC. The best part is there's no need to mess around with the TaskScheduler.

garlin · Aug 14, 2023

I had great expectations, until I figured out what they did.

1. This app can't be uninstalled. They didn't include it in v1.0

2. SkipUAC works as a scheduled task proxy by creating an elevated SkipUAC_[Username] task.

3. You register an app with SkipUAC, which generates an unique key. The desktop shortcut simply calls "SkipUAC /ID key".

4. SkipUAC recognizes it's not elevated and calls the SkipUAC task with the key's argument. The elevated task calls SkipUAC again (but now it's elevated) and uses the key to find the registered command.

In short, it's a janky execution cycle which a shortcut calls SkipUAC, to call its own elevated task, to call SkipUAC again, before calling your app. Hideous workflow, but I guess it works...

5. Running SkipUAC without /UAC option does require UAC rights.

6. You can't assign your own /ID names, like "/ID regedit". But this program allows you run "SkipUAC /ID key" from any command line or script without special permissions. You just have to remember which key it is.

To me, having SkipUAC create individual tasks the old fashioned way is better. If you uninstalled SkipUAC (which can't be done today), then all your shortcuts are orphaned. The intent is nice, but the design is half-baked.

Code:

Timestamp           PID User    Task/Process                          Command Line
---------           --- ----    ------------                          ------------
08/13 11:16:12 PM 10352 GARLIN  explorer.exe                          C:\Program Files\SkipUAC\SkipUAC.exe /ID ktu
08/13 11:16:12 PM  1228 GARLIN  svchost.exe                           C:\Program Files\SkipUAC\SkipUAC.exe /UAC
08/13 11:16:12 PM       GARLIN  \SkipUAC_GARLIN
08/13 11:16:13 PM  5812 GARLIN  C:\Program Files\SkipUAC\SkipUAC.exe  cmd.exe /s

Sammy888 · Aug 14, 2023

garlin said:
I had great expectations, until I figured out what they did.

1. This app can't be uninstalled. They didn't include it in v1.0

2. SkipUAC works as a scheduled task proxy by creating an elevated SkipUAC_[Username] task.

3. You register an app with SkipUAC, which generates an unique key. The desktop shortcut simply calls "SkipUAC /ID key".

4. SkipUAC recognizes it's not elevated and calls the SkipUAC task with the key's argument. The elevated task calls SkipUAC again (but now it's elevated) and uses the key to find the registered command.

In short, it's a janky execution cycle which a shortcut calls SkipUAC, to call its own elevated task, to call SkipUAC again, before calling your app. Hideous workflow, but I guess it works...

5. Running SkipUAC without /UAC option does require UAC rights.

6. You can't assign your own /ID names, like "/ID regedit". But this program allows you run "SkipUAC /ID key" from any command line or script without special permissions. You just have to remember which key it is.

To me, having SkipUAC create individual tasks the old fashioned way is better. If you uninstalled SkipUAC (which can't be done today), then all your shortcuts are orphaned. The intent is nice, but the design is half-baked.

Code:

Timestamp PID User Task/Process Command Line --------- --- ---- ------------ ------------ 08/13 11:16:12 PM 10352 GARLIN explorer.exe C:\Program Files\SkipUAC\SkipUAC.exe /ID ktu 08/13 11:16:12 PM 1228 GARLIN svchost.exe C:\Program Files\SkipUAC\SkipUAC.exe /UAC 08/13 11:16:12 PM GARLIN \SkipUAC_GARLIN 08/13 11:16:13 PM 5812 GARLIN C:\Program Files\SkipUAC\SkipUAC.exe cmd.exe /s

Dang. I had no idea.

So how can I search for the orphaned entries? I suppose I can use CCleaner and perform a forced uninstall of this application?

garlin · Aug 14, 2023

If you remove SkipUAC.exe, then you have a shortcut with a failed target. I don't think they've planned this far ahead in v1.0 about proper clean up, or uninstalling. They normally do a good job with their other apps, but v1.0 is not polished yet.

Any shortcut you've created using SkipUAC will require the app to work.

Sammy888 · Aug 15, 2023

Where is the storage location or scripts you're referring to? It's not hiding in Task Scheduler.

Some apps like Reicon don't work well either, Defender Control is another. The team their get defensive and often don't approve comments that report their shortcomings. I think they have huge egos.

garlin · Aug 15, 2023

The app creates a scheduled task SkipUAC_[Username], which I found cannot be deleted even by TrustedInstaller. Each of your registered commands is saved in one of its registry keys. Anyone who's technical should investigate before using it.

SkipUAC works but in an unconventional manner which may not make security-aware users happy.

Sammy888 · Aug 16, 2023

garlin said:
The app creates a scheduled task SkipUAC_[Username], which I found cannot be deleted even by TrustedInstaller. Each of your registered commands is saved in one of its registry keys. Anyone who's technical should investigate before using it.

SkipUAC works but in an unconventional manner which may not make security-aware users happy.

Thanks for the clarification.

Before I went on my “adventure” with Sordum and other hacks/tweaks in this forum, I expected the worst.

Although I've been talking about it for a few months now, I'm overdue for a Windows reinstall. I'll likely be reverting to Windows 10 or if a judge doesn't acquit White OJ or if Teflon Don is unsuccessful in pardoning himself, I'll try to tough it out until late next year when Windows "12" debuts and do a clean install of W12.

Foegi73 · Nov 24, 2023

garlin said:
6. You can't assign your own /ID names, like "/ID regedit". But this program allows you run "SkipUAC /ID key" from any command line or script without special permissions. You just have to remember which key it is.

I need an identical ID on 3 PCs for portable programs which I sync via OneDrive and have looked / found a solution.
With a small hack you can define your own 3-digit ID.

Under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SkipUAC_km\Sdata
you can define the ID yourself in binary format.

E.g. fsc = 66 00 73 00 63 00

Everyone has to decide for themselves whether the tool makes sense or whether they prefer the old-school way via shortcut and Task Scheduler Library.