-
Title
How to create a rule to elevate Computer Management application -
Description
To create a rule that properly elevates the privileges of a regular user to be able to execute the computer management application, the correct process and arguments must be found, to do that Process Explorer application can be used. To use it please refer to our knowledge base article How to use Process Explorer to create rules in Privilege Manager
Once the process is detected, the properties will show the Image information to get the Command line.
From this image, the path to executable is:
%SystemFolder%\mmc.exe
and the arguments are:
"%SystemFolder%\compmgmt.msc" /s
Note: Quotes are very important to apply the rule properly.
Once the command line is found the rule can be created with this information as follows:
When the rule is saved and replicated to all domain controllers and the group policy objects are updated on workstations (submitting the command "gpupdate /force" will update the policies immediately or waiting for next automatic update), then the application will run with elevated rights and show the privileged information.
-
Resolution
To create a rule that properly elevates the privileges of a regular user to be able to execute the computer management application, the correct process and arguments must be found, to do that Process Explorer application can be used. To use it please refer to our knowledge base article How to use Process Explorer to create rules in Privilege Manager
Once the process is detected, the properties will show the Image information to get the Command line.
From this image, the path to executable is:
%SystemFolder%\mmc.exe
and the arguments are:
"%SystemFolder%\compmgmt.msc" /s
Note: Quotes are very important to apply the rule properly.
Once the command line is found the rule can be created with this information as follows:
When the rule is saved and replicated to all domain controllers and the group policy objects are updated on workstations (submitting the command "gpupdate /force" will update the policies immediately or waiting for next automatic update), then the application will run with elevated rights and show the privileged information.