<< Subtext On Mobile Devices | Home | Subtext 1.9 "Daedelus" Release... >>

MakeMeAdmin And Console MatchMaker

I am still continuing my experiment in running as a LUA (aka Non-Admin). Let me tell you, it has been a total pain in the ass and now I totally understand why more developers do not do this, which feeds into the vicious cycle in which apps are developed that do not run well under least user privileges. When I have some time, I will write up my experiences.

One tool that has been invaluable in this experiment is the MakeMeAdmin batch file used to temporarily elevate your privilegs in a command window. This has worked nicely for me for a while.

Then Scott Hanselman points out Console that takes cmd.exe and adds transparency and tabs. Just pure geek hotness that I gotta have.

However, the only command shell I normally keep open is my MakeMeAdmin shell. It’d be a shame to install Console and never see its sleek hotness. So I decided to play matchmaker and see if I could marry these two wonderful utilities.

I modified the MakeMeAdmin.bat file to use Console instead. It was a one line change (note file paths should be changed to fit your setup and the line break in there is for formatting purposes. There shouldn’t be a line break.).

set _Prog_="console.exe c:\console_admin.xml 
    -t """*** %* As Admin ***""""

I also created a new admin config file named console_admin.xml that specifies transparency and a red tint which lets me know that this console window is not like the others. It will run commands as an admin.

I’ve uploaded my modified MakeMeAdmin.bat file as well as the console configuration file to my company’s tool site here. Hopefully all five of you out there also running as a non-admin will find this useful.

tags: LUA, Least User Account, NonAdmin

What others have said

vern Aug 30, 2006 5:04 PM

# re: MakeMeAdmin And Console MatchMaker

My laptop is off being repaired. When it returns, I am going to do a fresh install. I am seriously considering trying this again.
The biggest hurdle, for me, are the two programs I use regularly; Chief Architect and QuickBooks. QB is horrible at requiring Admin priveleges.

Hopefully it will work out ok.

Christopher Steen Aug 30, 2006 11:30 PM

# Link Listing - August 30, 2006

Using the TreeView Control and a DataList to Create an Online Image Gallery [Via: ] SQL/.NET Job with...

Thomas Eyde Aug 31, 2006 3:05 AM

# re: MakeMeAdmin And Console MatchMaker

I tried to run as non-admin on my brand, new laptop. It wasn't exactly a great experience. I am now back among the local admins.

Chris Aug 31, 2006 12:23 PM

# re: MakeMeAdmin And Console MatchMaker

Not sure why everyone is having a tough time with running as non-lua. I develop software running as lua using vs 2003, vs 2005, vb6 (launched using makemeadmin). I also run quickbooks through makemeadmin.

Honestly, it's not that hard guys... Some of us (I meant you guys) are just lazy! :-)

haacked Aug 31, 2006 1:02 PM

# re: MakeMeAdmin And Console MatchMaker

Well it's not just laziness. Everytime I install a new utility, for example the software to control my UPS, they want to write to the program files directory.

Thomas Eyde Sep 01, 2006 7:23 AM

# re: MakeMeAdmin And Console MatchMaker

Windows Update behaves in a strange way when all you want is to download the updates, but install later. Many smaller nice-to-haves fails in strange ways. I don't like to use my account to run ASP.NET, just so I can debug; I want to use the same type of account as used in production. It was a pain in the behind to install everything on my new laptop.

But I really like a writeup from those of you who made it, so I can learn what to do. Unless you aren't too lazy, erh, too busy :-)

Alexander Groß Sep 01, 2006 6:07 PM

# re: MakeMeAdmin And Console MatchMaker

Acknowledged, LUA can be a pain in the neck with lots of fine-tuning, especially if you want to use non-LUA-aware applications, and there are lots of them.

I'm running in a LUA environment for over a year now (yes, I'm satified with the experience) and have gotten rid of most problems using the excellent Microsoft Application Compatibility Toolkit. Sure, you have to create the appfixes yourself (sdb files), but these solved almost all application-specific problems I had. By now I have a whole stack of sdb files that I just need to deploy to new machines.

Lothan Sep 02, 2006 7:09 AM

# re: MakeMeAdmin And Console MatchMaker

I've been running as a limited user for about a year and MakeMeAdmin has been extremely valuable, but you need to be careful when installing applications and updates that require a reboot. I've discovered quite a few that continue the installation process after I logon and fail miserably if I logon with an LUA account after rebooting.

It is a major pain in the ass initially until you learn how to work around applications that attempt to open HKLM in read/write mode to read a key or that attempt to write to files in the Program Files folder.

Overall, I'm pleased with the results and (perhaps it is my imagination) it seems my system remains stable for longer periods of time. Windows Vista has features that makes running as LUA easier (e.g. shadowing registry entries), but I think Microsoft took the wrong approach by popping up logon dialogs at every turn.

What really concerns me with Vista is that it becomes a bit too rote to enter a password when prompted without realizing why we are asked to do so, and the password dialog doesn't contain enough information to make it clear.