none
Elevate privileges in WinRM session with local admin credentials RRS feed

  • Question

  • Hello everyone,

    In my company, we want to change the way we access workstations remotely (helpdesk).
    Currently we are using PSExec with domain accounts with local admin privileges to run commands remotely.

    But, for security reasons, we would like to:
    - use a standard account without privileges to connect to the workstation 
    - elevate privileges with a local admin account managed by LAPS

    No problem with RDP, but we would like to use WinRM so that the users are not affected.

    The problem is, because of UAC, we didn't manage to elevate our privileges in a WinRM session (runas).

    Do you know of a way to elevate privileges with local admin account password in WinRM session without disabling UAC?
    Otherwise, do you know another protocol that supports UAC remotely ?

    Thank you

    David

    Thursday, September 24, 2020 9:37 AM

All replies