Hero Banner

Modern Workplace Discussions

Discuss best practices related to Security, Teamwork and Unified Endpoint Management (Microsoft 365).

Reply
Level 3 Contributor

make quick assist run as admin

We need to be able to use Quick Assist in Windows 10 to do some administrative tasks, but if the end user initiates the Quick Assist session then the remote admin is limited to only what the end user has access to.  Is there any way we can start Quick Assist as an administrator or elevate it to admin level during the Quick Assist session?

17 REPLIES 17
Visitor 1

This was a great post but I think most of the people replying missed what was being asked here, I believe the requestor is basically suggesting he/she is IT Support etc and needs to be able to support users who are currently wfh. 

 

At the moment if you use Quick Assist or programs such as Logmein, when you connect to a remote users laptop/PC and try to do anything that requires an administrator elevation, the screen is just blanked out. I kind of understand the reasoning around this for security purposes, but at the same time, it sucks for us IT support people!

 

Main reason for this is, the end user doesn't/won't know the local admin password, only I do, yet it's being blanked out for me to type it in!

 

If anyone has come across this issue, and working in IT Support, but found a resolution, please get back to me!

Level 3 Contributor

This is exactly what I am suggesting. Thank you for understanding.  As kieferjocopp13 explained, we need an option in the tool that allows us to run everything from the beginning as an administrator so we can easily access what is needed to support an end user and the affected system.  Thank you.

Well, my thinking is that allowing this would be a big security risk, especially assuming the machine of the end user would be infected with something (and this is why the user calls helpdesk)

This is also why e.g. Config Manager Remote Assist does not allow this an explicitly mentioned as "do not enter admin credentials in the remote session". The only supported/recommended way is changing the user log in because in this scenario it is much less likely a key logger does run. 

My 2cts...

Kind regards,
Janosch
Level 1 Contributor

Hello, unable to take the "appwiz.cpl" in run as admin over quick assist.

 

Level 2 Contributor

Hi @ravilasya18 

Please follow the below steps.

  1. Open CMD
  2. Within CMD, launch cmd again in Admin mode by user the below command.
    runas /user:domain\administrator cmd
    *administrator can be replace with any admin account.
    *type the admin password once its prompt.
  3. New CMD will be in Admin mode, just type appwiz.cpl or any command you want. It will be run under the admin mode without asking any password. 
    I hope it will work for you, if still any query please feel free to contact.
Level 1 Contributor

Hi,
Everything will work. Accept this appwiz.cpl. appwiz.cpl is still not working.

Level 3 Contributor

JoeRainero_0-1598971036390.png

I got this error when trying to start control from inside of the runas cmd prompt.

Level 2 Contributor

Hi @ravilasya18 ,

 

There is another way to uninstall the applications in cmd, please follow the steps as mentioned below.

 

  1. Launch CMD again in Admin mode by user the below command.
    runas /user:domain\administrator cmd.exe
  2. Launch Windows Management Instrumentation Command line by using the below command
    wmic

  3. Type below command to get the list of installed applications.
    product get name

  4. Copy the full name of application (which you want to uninstall) from the list, and type below command.
    product where name="XXXX" call uninstall
    *Replace XXXX with application name e.g., product where name="Microsoft Search in Bing" call uninstall
    *Above command will uninstall Microsoft Search in Bing

  5. You will get the message of confirmation, type Y to confirm.
Level 1 Contributor

Still not working.

Level 2 Contributor

What error you are getting and which application you want to remove?

Level 2 Contributor

Quick Assist is my preferred application to resolve all technical issues remotely.

It also allow me to Run as Administrator to install and configure hardware/software but there are few steps required as mentioned below:

  1. Run CMD at end-user's computer
  2. Type the below command:
    runas /user:domain\administrator cmd
    *domain will be any domain of your organization
    *administrator can be  any administrator login.
    If domain is not available type the below command in cmd.
    runas /user:local_user cmd
  3. Put the admin password.

Now you have successfully launched cmd in administrator mode, you can run the below tasks.

  • x:\MicrosoftEdgeSetup.exe (for software installation, where x is any drive letter from your computer).
  • appwiz.cpl for installing or uninstalling program.
  • services.msc (Run or Stop a service)
  • devmgmt.msc (Device Manager, to install/uninstall or upgrade the device driver)
  • diskmgmt.msc (Disk Management
  • compmgmt.msc (Computer Management)
  • regedit (Registry Editor)

Above mentioned are just example, you can use the number of commands as per your requirement. 

Level 3 Contributor

We manage computers for many people and the end users sometimes do not have admin level access to those systems.  When the end user needs assistance, we would like to be able to run quick assist as an admin so that when we remotely assist the end user, we will be able to enter the admin credentials.  At this time, whenever UAC prompts for credentials, the screen goes blank for the remote admins.  Is there a way we can remotely send those credentials over without giving them to the end user?

Level 2 Contributor
Level 1 Contributor

It work fine for me, thanks a lot

Level 3 Contributor

Hello Anik,

 

Will this allow me to run an installation without having UAC prompt?  I noticed when I do this and type regedit the system prompts for UAC "Do you want to allow this app to make changes to your device?"  When UAC prompts it blanks the screen for the remote user running Quick Assist.  

 

Thanks,

Joe

Level 2 Contributor

@JoeRainero 

Do the following steps in order to launch regedit at end-user's desktop.

  1. Run CMD at end-user's desktop.
  2. Type the below command:
    runas /user:domain.local\administrator regedit.exe 
    if there is no domain account, use the below command
    runas /user:administrator regedit.exe
  3. cmd will ask for the admin password, once you put the password, user will get UAC message and user has to click Yes only.
Level 1 Contributor

Hello, has anyone found a way since then?