Based on my testing, it seems like it is not possible to use the new “runas” functionality for our use case (below). Has this been mentioned before? I assumed our use case was pretty typical, but perhaps it’s not.
- Used for software installs (which require admin privileges to install)
- Software install requires user input (UI needs to be displayed to user)
- Software install does NOT require any specific user to be associated with it (meaning we want the program to run under the context of the current user, but with elevated permissions)
Knowing this use case, you can see that we obviously don’t have a specific domain user / admin account that we use for installs, so we don’t need the “runas=localuser” ability (which requires a specified password to run elevated) – we really just need a modified form of the “runas=currentuser” function, allowing it to run elevated.
FYI we are currently using SCCM to cover this use case, but our goal is to get rid of SCCM entirely so this is a requirement for us to be able to accomplish that.