Asked by:
how can I allow permanently an app from an unknown publisher?

Question
-
Hi,
I have a couple of applications installed on Win10 which are not signed by a Microsoft known publisher and everytime I try to open them I have the classic UAC message saying "Do you want to allow this app from an unknown publisher to make changes to your device?" and I need to enter my admin's credentials to continue.
Since I know these apps, I'd like to open them quickly with my normal account (NOT administrator), without that prompt and without have to disable the UAC (which is important) or the Smartscreen completely. I'd like just to allow some of these apps to run for a normal user, with no problems.
Is it possible? I searched a lot on the web and it seems there is no solution, so I thought Technet could possibly be my last chance to find a solution.
Thank you in advance
Sunday, April 23, 2017 11:57 PM
All replies
-
These links may be useful:
The first link allows you to completely turn off UAC or reduce the settings.
The second link offers work around solutions (click on links within the link) for specific software such as task scheduler, run as etc.
https://www.cnet.com/how-to/how-to-run-everything-in-administrator-mode-and-why-you-shouldnt-do-it/
https://superuser.com/questions/850473/giving-permission-to-program-to-run-with-out-confirmation-in-start-command-windo
Monday, April 24, 2017 2:02 AM -
Hi Giant Lizard,
According to your description, you want to allow some of these apps to run for a normal user( not administrator). enter my admin's credentials to continue. Because your normal account doesn't has Admin privileges, so you need to enter admin's credentials to continue.
Run As Administrator will still require a password unless you are logged on as an admin.
We could check the link below about enable standard users to run a program with admin rights without the password.
https://www.maketecheasier.com/standard-users-run-program-admin-rights/
Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Hope it will be helpful to you
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.Tuesday, April 25, 2017 7:33 AM -
These links may be useful:
The first link allows you to completely turn off UAC or reduce the settings.
The second link offers work around solutions (click on links within the link) for specific software such as task scheduler, run as etc.
https://www.cnet.com/how-to/how-to-run-everything-in-administrator-mode-and-why-you-shouldnt-do-it/
https://superuser.com/questions/850473/giving-permission-to-program-to-run-with-out-confirmation-in-start-command-windo
Hi,
thanks for help. I tried the solutions reported in the second link (especially the one with the schedule task) but it doesn't work :/
Tuesday, April 25, 2017 12:14 PM -
Hi Giant Lizard,
According to your description, you want to allow some of these apps to run for a normal user( not administrator). enter my admin's credentials to continue. Because your normal account doesn't has Admin privileges, so you need to enter admin's credentials to continue.
Run As Administrator will still require a password unless you are logged on as an admin.
We could check the link below about enable standard users to run a program with admin rights without the password.
https://www.maketecheasier.com/standard-users-run-program-admin-rights/
Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Hope it will be helpful to you
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.Hi,
thank you for your help, but no, I don't need to run these applications as an admin, I just need to normally run them as a normal user. But since they are from an "unknown publisher", Windows need the admin password in order to run them. I'd like to simply tell Windows "I trust them, stop asking me the admin password every damn time!".
Weird enough, it seems there is no such option in Win10 :/ while there was in Win7 I think (I seen the same error message searching on internet and there was a flag to "don't ask again for this app").
Tuesday, April 25, 2017 12:17 PM -
up :(
still looking for a solution.
Sunday, April 30, 2017 12:40 PM -
See if something in this link helps:
https://www.tenforums.com/tutorials/57690-create-elevated-shortcut-without-uac-prompt-windows-10-a.html
Monday, May 1, 2017 7:11 AM -
See if something in this link helps:
https://www.tenforums.com/tutorials/57690-create-elevated-shortcut-without-uac-prompt-windows-10-a.html
thank you, it's almost the same suggested in the first reply (it changes just a little) but the result is the same: it doesn't work. When I run the shortcut it open and close immediately a prompt window and nothing happen :/
It's strange, I felt like this was something actually easy to solve, but instead it seems there is no solution whatsoever :(
Monday, May 1, 2017 10:07 PM -
Hi Giant,
from memory, isn't there an option to always allow on the UAC prompt....can you post a screen shot?
Have you checked with the software vendors' web sites for updates for their software..... they have to port their installers using the Windows 10 application bridge as they are making changes to the HKLM keys which is no longer a 'best practice' in Windows 10.... they may have already repackaged their software and are now distributing it on the Windows Store... (helps if you can include the name and vendor of this software with your questions)
Its up to the software vendors to repackage their software so that installs (as a windows executable, not a windows store app) in the current user registry hive and does not make changes to the HKLM registry hive.
Rob^_^
Tuesday, May 2, 2017 1:51 AM -
Hi Giant,
from memory, isn't there an option to always allow on the UAC prompt....can you post a screen shot?
Have you checked with the software vendors' web sites for updates for their software..... they have to port their installers using the Windows 10 application bridge as they are making changes to the HKLM keys which is no longer a 'best practice' in Windows 10.... they may have already repackaged their software and are now distributing it on the Windows Store... (helps if you can include the name and vendor of this software with your questions)
Its up to the software vendors to repackage their software so that installs (as a windows executable, not a windows store app) in the current user registry hive and does not make changes to the HKLM registry hive.
Rob^_^
Hi Rob,
I think it was an old option (I saw it in old Windows versions looking for that prompt in goog...ehm, Bing :) ), but now there is not that check anymore.
I've found on internet a message like the one I have: https://i.ytimg.com/vi/kqYF3zG6K_0/maxresdefault.jpg
Of course I don't have that application, but the message is exactly the same. Even doing "more details" I just have the Program location path.
Tuesday, May 2, 2017 6:20 PM -
up :(
is there any way maybe to create a certificate so that the application is trusted by Microsoft?
Tuesday, May 9, 2017 10:23 PM -
I've maybe found a "kinda" solution. I've discovered a cmd command which allow me to force to run an application as a normal user, so without the prompt for admin rights.
The command I use is the following (I've made a .bat file):
cmd /c "set __COMPAT_LAYER=RUNASINVOKER && start "" "application path"
with the true application .exe file I want to run instead of "application path". With this, the application works without asking me anything. Of course it works WITHOUT the admin rights, so it could maybe give me some problems later (but I think that would happen only if it needs to do something else outside the application).
I've also created a "send to" link (just copied another .bat file in the SendTo folder) and like this I can run whatever application I want, without the admin prompt, just right-clicking, selecting "send to" and chose the .bat file I've created, which is slighty different:
cmd /c "set __COMPAT_LAYER=RUNASINVOKER && start "" %1"
So, in short, I think the problem wasn't the fact that the app is from an unknown publisher, but only that the same app has been created to run with admin rights.
I can also change the .exe with an application called Resource Hacker (created by Angus Johnson), which in spite of the name, is nothing dangerous and it allows you to modify an .exe file code, and for example remove the "admin account required" rule to run it.
Another possible solution I didn't test, is to create a .bat file that automatically run the app as an admin account (inserting user and password), then change this .bat file to a .exe file with IExpress (Windows' built-in program) in order to hide the user and password (well, easier to see them in a .bat file than .exe file, no?).
Please let me know what do you think of all this. And thank you again for your help.
- Proposed as answer by Hojabr Monday, June 18, 2018 10:30 AM
Sunday, May 21, 2017 9:57 PM -
Hi giant lizard.
i was struggling same problem on my office network and i couldnt risk the security by changing UAC rules. that send to solution was amazing, really. i searched all over the internet and it was the best solution i ever came a cross.
anyway, thanks for sharing, Respect.
Monday, June 18, 2018 10:33 AM -
Hi giant lizard.
i was struggling same problem on my office network and i couldnt risk the security by changing UAC rules. that send to solution was amazing, really. i searched all over the internet and it was the best solution i ever came a cross.
anyway, thanks for sharing, Respect.
Monday, June 18, 2018 3:08 PM -
This works nicely for me too. Thanks.
But I'm having a problem launching apps with command line switches. I assume it's a question of syntax. Any advice?
Sunday, December 15, 2019 6:21 AM -
This just worked on an older version of a niche app I have at a client.
I tried everything I could find until this post... and this worked!Thanks much
Tuesday, February 18, 2020 3:47 AM