Detect admin privilege due to elevation?

03-09-2007

What API can I use to distinguish between having administrator privilege normally, versus having
administrator privilege due to elevation (where a user is prompted to enter an admin account and
password)?

--
Regards,

Frank

03-09-2007

None. There is no difference between the two. You could look to see if UAC is
enabled and surmise from that.

"Frank S" wrote:

> What API can I use to distinguish between having administrator privilege normally, versus having
> administrator privilege due to elevation (where a user is prompted to enter an admin account and
> password)?
>
> --
> Regards,
>
> Frank
>

03-09-2007

Frank S wrote:
> What API can I use to distinguish between having administrator privilege
> normally, versus having administrator privilege due to elevation (where a
> user is prompted to enter an admin account and password)?

You can use GetTokenElevation() with a TOKEN_INFORMATION_CLASS of
TokenElevation or TokenElevationType to determine if and how a token is
elevated. The Windows SDK does not seem to have these values documented, so
you may have to look at winnt.h to see what can be returned for these.

--
Larry Futrell

03-09-2007	#1 (permalink)
Frank S Guest n/a posts	Detect admin privilege due to elevation? What API can I use to distinguish between having administrator privilege normally, versus having administrator privilege due to elevation (where a user is prompted to enter an admin account and password)? -- Regards, Frank
My System Specs

03-09-2007	#2 (permalink)
Jesper Guest n/a posts	RE: Detect admin privilege due to elevation? None. There is no difference between the two. You could look to see if UAC is enabled and surmise from that. "Frank S" wrote: > What API can I use to distinguish between having administrator privilege normally, versus having > administrator privilege due to elevation (where a user is prompted to enter an admin account and > password)? > > -- > Regards, > > Frank >
My System Specs

03-09-2007	#3 (permalink)
Larry Futrell Guest n/a posts	Re: Detect admin privilege due to elevation? Frank S wrote: > What API can I use to distinguish between having administrator privilege > normally, versus having administrator privilege due to elevation (where a > user is prompted to enter an admin account and password)? You can use GetTokenElevation() with a TOKEN_INFORMATION_CLASS of TokenElevation or TokenElevationType to determine if and how a token is elevated. The Windows SDK does not seem to have these values documented, so you may have to look at winnt.h to see what can be returned for these. -- Larry Futrell
My System Specs

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Lost Admin Privilege! Please Help Me!	eldron	General Discussion	20	08-12-2008 01:09 PM
detect user privilege level	mjblood	General Discussion	0	05-27-2008 08:57 AM
Elevation of privilege question and Support Tools	JCB	Vista networking & sharing	1	08-03-2007 06:36 AM
admin privilege	Ravi	Vista account administration	2	07-05-2007 12:41 PM
Best practices for privilege elevation in cmdlets?	Alex K. Angelopoulos [MVP]	PowerShell	5	09-29-2006 10:35 AM