How do I run an elevated explorer on W8R2 with default UAC?

Question

On Windows Server 2008 R2 with the User Account Control Settings at the third highest level when you start explorer as administrator it doesn't appear to actually grant administrative rights to the process.

Is there a way to leave UAC at that level AND be able to start an explorer process as a real administrator?

Solution 1

The following procedure works for me but not the shortest one:

1. Make sure that account you are logging in as has the appropriate credentials for the task you are trying to accomplish, in my case, I needed to be part of the domain builtin\Administrators group to manage my DC. I made sure to add my account to this group first.
2. Next Right-click black Command Prompt icon on start menu.
3. Select Run as administrator
4. Type in the account credentials you created above. Unfortunately, you will need to type them in again.
5. Next use the following command: runas /user:domain\username "explorer /separate"
6. It should prompt for your password in the command line, enter your password. Unfortunately, it will not automatically launch windows explorer, you will still need to type the command.
7. Now type either one of the following commands while still in the command line:
8. "explorer ." or start .

This seemed to work well for me, let me know otherwise and I hope that it helps someone.

I pulled the information from the following MS forum: http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/how-to-start-windows-explorer-as-administrator/a3cfdd52-695d-46b0-a617-1c9128addf01

Solution 2

Kill explorer. Start elevated explorer.

Back in 2008 pre-R2, I used to do this by running explorer from an elevated command prompt. This doesn't seem to work anymore with R2.

The only way I've found to do it in R2 so far is by killing the existing non-elevated explorer instance first. Once the non-elevated explorer is gone, the elevated version will launch successfully from wherever you launch it.

I'm curious to see the other answers this generates, because killing explorer is messy. The only other option I know of is to login with the actual administrator account since UAC doesn't apply to it.

Comments

[Admin]

Just to be clear, UAC at the "third highest level" is the default in 2008 R2.

[Admin]

I use the 7-Zip File Manager (elevated) if needed.

[StackzOfZtuff]

Doesn't work for me. (Win2008R2). Step 5 launches an un-separated explorer for me. Also: the MS link is doing this with the default named Administrator account. This is not an option for me.