mirror of
https://github.com/rustdesk/rustdesk.git
synced 2026-03-02 19:26:56 -05:00
Add way to remotely enter admin password (UAC Elevation for portable version) #56
Labels
No labels
bug
documentation
duplicate
enhancement
enhancement
enhancement
good first issue
help wanted
invalid
question
unreproducible
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/rustdesk-rustdesk#56
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @marekjedrzejewski on GitHub (Jun 9, 2021).
When rustdesk is ran as standard user in Windows, when UAC prompt shows up, on the connecting side screen just freezes, and I don't see option to provide password without entering it on the other side. Would be very nice to have this option :)
@marekjedrzejewski commented on GitHub (Jun 13, 2021):
AnyDesk has option to provide credentials to run its client with. I did some googling and looks like CreateProcessWithLogonW might be the function that it's using under the hood.
@rustdesk commented on GitHub (Jun 13, 2021):
Thanks, i will check
@rustdesk commented on GitHub (Jul 6, 2021):
@kintaro1981 commented on GitHub (Jun 20, 2022):
In teamviewer when asked for id and password you can insert windows credential instead.
those credential are passed from the client to the remote machine server that once receive them restart itself with those credential.
@schleyk commented on GitHub (Jul 1, 2022):
Yes, would be a very cool feature for the RustDesk portable version.

@lasselin commented on GitHub (Aug 10, 2022):
Hi,
Same issue here. It makes it useless when the remote user is not admin.
So it would be a nice feature for Rustdesk.
Thanks in advance.
Best regards,
@bilogic commented on GitHub (Aug 15, 2022):
I recall Teamviewer portable being able to control admin apps without asking for UAC, did I remember correctly?
I meant to ask: how did they do it?
@kintaro1981 commented on GitHub (Sep 16, 2022):
They are doing it in the way @schleyk said.
From the client you can choose to authenticate with the "generic" password generated from the server or with "windows authentication" in this way who give support insert local admin credential and click on log on. After this teamviewer server restart it self and launching it self with the credential provided from the client (like a runas), at this point the client once connected to the server can see and interact with UAC.
@bilogic commented on GitHub (Sep 16, 2022):
Actually I just tested again, TeamviewerQS did request for UAC, that is probably why they are able to control all windows.
Perhaps RustDesk can do the same.
@kintaro1981 commented on GitHub (Sep 16, 2022):
@bilogic TeamviewerQS ask yes/no when it restart it self after the client send the administrative credentials by TV authentication (see @schleyk message here: https://github.com/rustdesk/rustdesk/issues/70#issuecomment-1172364732).
If you launch it from a limited user it don't request for UAC and in this case if you connect to it with "standard tv authentication" (id and tv password) you can't interact with UAC.
@PacGyver commented on GitHub (Sep 16, 2022):
Supremo and PC Visit are able to pass the UAC while launched as standard User. PC Visit is even more advanced, as it is able to ask the remote User for credentials. Dont know how it is actually working, but I think:
"someone" entering administrative credentials
These are used to spawn a New process
UAC getting up for the remote User, but He doesnt have to input anything, just yes/no Dialog.
The New process is elevated.
Dont know if it is able to restart the rustdesk Session directly or of it is Necessary to create a Service first.
@mnaiman commented on GitHub (Sep 25, 2022):
Hi @rustdesk - this is really great software and I agree that ability to control UAC is important. Even for portable version (only reason why Im using TeamViewer now :/).
If I start portable version using this command
PsExec64.exe -sid RustDesk.exeIm able to control UAC with portable version.
PsExec is Microsoft tool to run process as SYSTEM.
So clearly it doesn't need to service be installed (portable version).
What's need to be implemented
@rustdesk commented on GitHub (Sep 25, 2022):
@21pages is working on this
@rustdesk commented on GitHub (Nov 16, 2022):
It is useless, even we call it, there is still a UAC window poped out though no need to input account/password, but still need to wait for clicking from host user. Even with
https://stackoverflow.com/questions/24965411/how-does-task-manager-elevate-without-uac-prompt

Another way is we can use UAC bypass, but we do not want.
https://github.com/SecWiki/windows-kernel-exploits
@PacGyver commented on GitHub (Nov 16, 2022):
Commercial ones are acting the same and i think this is one Part of handling the UAC properly. For on demand Support this is no problem.
@rustdesk commented on GitHub (Nov 16, 2022):
Close this because we can support remotely input user/password, but UAC windows is still popped out, it does not help much.
@rustdesk commented on GitHub (Nov 16, 2022):
try out tomorrow's nightly build please, though still require host user to input user/password https://github.com/rustdesk/rustdesk/releases/tag/nightly
@rustdesk commented on GitHub (Nov 16, 2022):
in the future we can also provide a version like TeamviewerQS which always require uac when you open it.
@rustdesk commented on GitHub (Nov 16, 2022):
@21pages add it into nightly ci please
@neogalaxy88 commented on GitHub (Nov 16, 2022):
for me the best way is like Anydesk: when necessary the operator requests administrative privileges with the possibility of entering by the user or by operator
@kintaro1981 commented on GitHub (Nov 16, 2022):
It is going to be good enough. Usually you are in contact with the remote user (text or voice). The solution is to ask to click on “yes”.
@schleyk commented on GitHub (Nov 16, 2022):
With TeamViewer / AnyDesk, the user also receives a UAC message which the person in front of the screen must confirm with "Yes" and TeamViewer / AnyDesk starts as admin.
Afterwards, it is possible to run applications as administrator and enter the password via remote control.
@rustdesk commented on GitHub (Nov 16, 2022):
So, this issue is for the case the host is not the administrator, but the remote user is the administrator? The remote user ask the host user to click the UAC yes.
@kintaro1981 commented on GitHub (Nov 17, 2022):
The host doesn’t know the local administrator password (and doesn’t have to know it). The remote user knows host’s local credentials password.
@rustdesk commented on GitHub (Nov 17, 2022):
Idea here
@kintaro1981 commented on GitHub (Nov 29, 2022):
Exactly the remote user once connected or before* sending rustdesk password send windows username and password (usually admin credentials of the host) and the remote host rustdesk restart it self with those credentials (if valid). At that point UAC is going to ask "yes or no" to the host. This is the best can be archived without installing rustdesk, and is how are working anydesk/teamviewer.
I can't remember is anydesk/teamviewer maintain those admin credential in cache during the session so the host can be remotely restarted and the remote user can re-connect without host's user interaction after the reboot.
*teamviewerqs works like this, after entering the host id it ask for password and you can chose to use the teamviewerqs' password or insert windows credential.
@rakleed commented on GitHub (Jan 4, 2023):
@rustdesk a few ideas on how to improve the UX of this feature:
It would be great if you could implement these improvements in the future.
@rustdesk commented on GitHub (Jan 14, 2023):
try out today's build please.
@rustdesk commented on GitHub (Jan 14, 2023):
where are they prededined? some picture please. @rakleed
@WhiteAls commented on GitHub (Jan 16, 2023):
I guess he means this
My gif is from AnyDesk installed on the windows server 2019 (resides in the domain) tho, so I may be wrong in interpreting his idea
@rustdesk commented on GitHub (Jan 16, 2023):
Thanks @WhiteAls , your gif reminds me another issue https://github.com/rustdesk/rustdesk/issues/323 :)
@qaqz111 commented on GitHub (Jan 19, 2023):
When the nightly1.2 starts as admin on remote host, the client still can not click UAC window remotely, while Teamviewer/AnyDesk/ToDesk can.
So can the operation of clicking elevate on host be skipped while rustdesk started as admin on host like the others do?
@rustdesk commented on GitHub (Jan 19, 2023):
Make sense, @21pages
@rakleed commented on GitHub (Jan 25, 2023):
@rustdesk here the first screenshot is from Windows 7, and the second screenshot is from Windows 10 and newer. It is important that this window is called on the host, and not through the interface on the remote computer, so I do not know if it can be done at all in your case.
I don't know Terminal Session is the same (what @WhiteAls wrote about), but I would like to see a similar interface in RustDesk.
@qaqz111 commented on GitHub (Feb 13, 2023):
It's great to see this has been implemented, thanks for your work!
@Dittos-Glove commented on GitHub (Mar 13, 2023):
I'm probably doing something wrong. But whatever was implemented doesn't seem to be working for me. I still am unable to see the popup when I remote into a users computer.
@TGeRi commented on GitHub (May 2, 2023):
Any update on this? A Rustdesk-client-side button "request UAC" would be nice. One time the user would have to click YES on the UAC window on the host machine and after that we could click with elevated privilages? Now for example if I want to uninstall an app from appwiz remotely I have to ask te user to click through all buttons as I cannot click with Rustdesk. :(
@technomancer-101 commented on GitHub (Jun 8, 2023):
@rustdesk was this feature removed due to the antivirus issues?
I understand that the client cannot interact with the UAC prompt directly, but from my understanding, @21pages made it so the portable client would send a prompt for escalation. That doesn't seem to be happening from what I've tested so far.
@21pages commented on GitHub (Jun 8, 2023):
not removed.
Not seen this or not seen rustdesk elevation prompt in the controlled side?

@21pages commented on GitHub (Aug 12, 2023):
server side crashed? Here is something you can help:
%appdata%/RustDesk/log/%appdata%/RustDesk/log/portable-serviceif it exists.%localappdata%/CrashDumpsexists, need not upload it.