14

"Sudo !!" invokes previously executed command with administrator privileges in *nix shell. Is there an equivalent in PowerShell?

BlueGene
  • 2,241
  • 9
  • 30
  • 33
  • See [my answer here](https://stackoverflow.com/a/62247178/111036), using Powershell's `Start-Process` with the `-Verb runas` option. – mivk Jun 07 '20 at 15:00

2 Answers2

14

$^ is a variable that expands to the last executed Powershell command.

You can run a command as another user using runas, so the following works:

runas /user:domain\administrator $^

To shorten that up a bit, you can do some magic with aliases. Take a look at this Technet article for more info.

EDIT: One caveat - $^ only executes the first command in a pipeline or multi-command line. If you need to redo an entire command that is peppered with pipes or semicolons, use Invoke-History instead (which defaults to the last full command in its entirety).

Community
  • 1
Hyppy
  • 15,608
  • 1
  • 38
  • 59
  • 3
    Actually, `$^` is the *first token* of the previous command. If I dot-source a script with `. ./foo.ps1` then `$^` is `.`. This also means that arguments are not contained. Doing anything that exceeds a single token will not work this way. – Joey May 17 '11 at 17:49
  • ok, does it ask for password after that ? I am trying to avoid embedding plaintext password in my script. – Senior Systems Engineer May 18 '11 at 00:48
  • Yes, it does. Unless you run the script as an administrator, you'll need to provide credentials to do anything that requires administrator privileges. You may want to look into something like Kixtart to tokenize an embedded password – Hyppy May 18 '11 at 11:23
1

I have always though of JEA (Just Enough Administration) as an attempt to approximate some of the functionality of sudo. You can read about it here:

https://docs.microsoft.com/en-us/powershell/scripting/learn/remoting/jea/overview

Where is differs is that it uses PS remoting rather than applying to the local machine. This may be quite a critical difference, enough to push it too far away from sudo.

Elevating to account for User Account Control, using runas or something else, doesn't really fit well for me. It's more like a parallel of su -.

PollusB
  • 103
  • 4
Chris Dent
  • 176
  • 2