如何以管理员身份在Guest帐户中运行C＃应用程序

Question

I didnt get correct answer and got lots of answers like "we can not do like this" for my previous questions.

Thats why I decided to explain in detail about my problem please help me if you can or please ask your friend who can answer this.

Now my problem:

Step 1:

I created a C# program which edits various windows registries. For editing windows registries we must have an Admin privilege. My program is running fine in Administrator mode without any problem.

Step 2:

I want my program to be run into limited user mode also. If few people didnt get what I am saying here is that I want to run my above C# code into Guest mode. In guest mode there is a restriction that We can not change Windows Registries. So as I am executing my Application, I am getting one notification which is asking for Admin Password. After inserting Admin Password my application is working fine.

Step 3:

I want that my application must not ask Admin password every time in Guest/limited account. I also want that in Guest mode my Application should work. I also want that in Guest mode my Application should be able to access and change Windows Registries.

Step 4:

Lot of people replied me that we can not do this in Guest mode since Windows is restricting users to edit windows registries for security purpose. So please if you also feel like this then please do not reply to this question. I am answering to those people that, all good antivirus which run into Guest mode has access to Windows Registries.

Step 5:

1. Since I know Admin Password so is there any way of saving Admin password in our C# code and bypass popup message of asking Admin password again and again.

2. Is there any way that we will instruct Windows that our application will be running in Admin mode and do not ask for Admin password again and again

3. How Antivirus application running in Guest mode do all the operation like deleting virus from system32 folder and resetting registries after Virus attack. These antivirus application never asks for "We found a virus in System32 folder, Since I am running in Guest mode and unable to delete virus, so please enter Admin password so that I can delete virus"

I hope you understood what i mean to ask?

I want to develop a C# application which should run in any mode (Admin/Guest/Limited) and should be able to Create, Edit and Delete Windows Registries.

Note: Please do not answer this with "right click and Run As Administrator".

Answer 1

To the best of my knowledge, antivirus software solves this problem by running two (or more) processes: a user interface program running as the guest user, and a privileged process (usually a Windows service). The user program is not able to actually manipulate privilege-restricted resources (like secure registry hives) -- instead, it communicates with the privileged process (hopefully in some secure way) and the privileged process performs the privileged action on behalf of the user.

This is the same kind of technique by which programs ever access privileged resources, such as hardware. Your user-level process doesn't (usually) have the right to perform various hardware actions, like remapping memory in the MMU, but the OS does, and you can get the OS to do what you want by asking it to. System calls thunk into kernel mode, which is fully privileged. However, the system call interface limits the kinds of privileged actions which you can take.

Answer 2

I cant help but saying, NO, you cant do admin things under a guest account. And no- you cant programmatically bypass UAC.

Maybe the following 2 workarounds are interresting for you?

I believe antivirus software runs under the System account (can only be installed by an administrator). For your application, you can create a server/client architecture (both running no the same machine) where the server is installed by the administrator (as part of the whole package) and runs by default under the System account. Then you can use the client on the quest account to send commands to the server.

One other solution might be not to use the registry directly but use another underlying datastore which is accessible by a guest account and synchronize that on demand with the registry (startup and shutdown?), so you only need the admin to login once or twice during the run of your app.