Solved Powershell command in batch script

DMD · Oct 28, 2023

Good morning
I am asking how to run a powershell command with administrator privileges in batch script.
The command I am interested in is the one related to App restore.

Code:

Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"

I have tried to run it in Batch by entering the powershell command but I have no idea how to enter elevated admnistrate privileges.
Any ideas?
Thank you very much.

Code:

powershell "Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}"

johnlgalt · Oct 28, 2023

2 ways.

1. Run the batch as admin - it should pass admin privileges to PowerShell.

How to Open Powershell With Admin Privileges From CMD

PowerShell can be opened directly from the Command Prompt.

www.howtogeek.com

2. The other way is to re-script that PowerShell command as noted in the following link to have PowerShell start itself with elevated privileges using -Verb runAs.

Run a PowerShell script from a cmd batch as admin

I have a PowerShell setup which I want to execute on a computer where perhaps the execution policy is restricted and requires admin rights. Ideally, I could wrap it in a cmd batch like follows:

stackoverflow.com

The first answer is what I'm referring to.

HTH

DMD · Oct 28, 2023

I thank you for the valuable information, but I don't quite understand the correct syntax of the command, I wrote it this way, but I think it is wrong.

Code:

powershell start-process powershell -verb runas "Get-AppxPackage -AllUsers| Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}"

johnlgalt · Oct 28, 2023

You missed the -Command right after the initial PowerShell.

Let me fire up a VM and test this after making sure my checkpoints are up to date.

Edit - there is more. Firing up the VM to test the final working version.

johnlgalt · Oct 28, 2023

OK, I can get the elevation part fine, but the full command in PowerShell fails. Same with PowerShell 7.

The first part of the line should be

Batch:

powershell -Command "start-process -verb runas powershell

But it fails on parsing the actual ps command.

I think using the actual example they have in that link, though, might be a trick - instead of passing the entire command, pass a ps file that has the command in it.

Meanwhile - are you trying to run this manually every time, or through a scheduled task, or ... ?

Any PS gurus out there that can chime in?

garlin · Oct 28, 2023

What you're seeing is the headache of invoking a PS expression, inside a PS command line, inside of a batch file. Each level of CMD or PowerShell wants to eat your special characters. Now you could spent all day learning to add escape characters to this Rube Goldberg mess, or just use a pre-made CMD wrapper.

Fortunately, I have one that will self-elevate when needed. Add your PS expression or code after the "#>"

Code:

<# : batch script
@echo off
powershell -nop ^
"if (-not ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')) { ^
    Start-Process -Verb RunAs 'cmd.exe' -ArgumentList '/c %~dpnx0 %*' ^
} ^
else { ^
    Invoke-Expression ('$args = @(''%*'' -split '' '')' + [System.IO.File]::ReadAllText('%~f0')) ^
}"
goto :eof
#>

Get-AppxPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}

DMD · Oct 29, 2023

Thank you very much, you were kind and helped me to solve this problem.
Also, I added the command to run with administrative privileges.
Just launch the file in normal mode, execution is done in administrative mode by running the powershell command.

Code:

<# : batch script
@echo off

@chcp 28591 > nul
::@mode con cols=101 lines=20
@Title Running in ADMINISTRATOR mode
:: We run the commands with administrator permissions
::------------------------------------------
:: --> Verification of authorizations
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
:: --> Error you do not have administrator rights
if '%errorlevel%' NEQ '0' (
echo     Requesting administrator privileges
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
@echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
set params = %*:"="
echo UAC.ShellExecute "%~s0", "%params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
exit /B
:gotAdmin
if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
pushd "%CD%"
CD /D "%~dp0"

powershell -nop ^
"if (-not ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')) { ^
    Start-Process -Verb RunAs 'cmd.exe' -ArgumentList '/c %~dpnx0 %*' ^
} ^
else { ^
    Invoke-Expression ('$args = @(''%*'' -split '' '')' + [System.IO.File]::ReadAllText('%~f0')) ^
}"
goto :eof
#>

Get-AppxPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}

exit