0

I have a (.net) program that can normally run either with or without elevated privileges in Windows.

In fact, the program itself offers a menu option that allows the user to switch between the two (when used the program effectively relaunches itself, with the help of another program, to the user's desired privileged level).

In any case, the problem I am having is that when running in the Windows Sandbox, the program always launches with admin privileges even when it is launched (via myprocess.start) without requesting admin privileges.

I checked a couple of other programs: the Windows command prompt, and the Windows dialer program (found in c:\windows\system32), and when started (manually) they both also start with elevated privileges in the Windows Sandbox whereas in a normal Windows 11 session when started in the same way they start without elevated privileges.

This behavior, of a program starting in the Sandbox with elevated privileges, when in normal (non-sandbox) Windows it starts without elevated privileges is causing me grief. Especially around the functionality within my solution that allows the user to switch between the two.

Also, I have a user who wants to test my app in the Sandbox before installing it predominately in Windows (which is understandable) but I can't find a way to make the program run in the Sandbox as it does in normal Windows without admin privileges.

Any helpful insights would be appreciated.

(As a side note: Windows Sandbox also loads with UAC off, whereas in most cases I suspect UAC would be on in normal Windows at its default level. In any case, I have a workaround for that in my program, and if it detects UAC is off the user is notified.)

Rob
  • 3,488
  • 3
  • 32
  • 27

0 Answers0