Is it possible to elevate the permissions of a powershell script so a user without admin privileges can run the script? Our network admins are trying to find more time-efficient ways to accomplish certain tasks that right now they have to use remote desktop for…automating them with PS scripts would help, but the users don’t have admin rights.
Share
The task is more like setuid than sudo … and thankfully, setuid is possible: you can simply create a scheduled task (without a set schedule), and set it to run elevated. Then, give your users rights to execute that task. I outlined the process in a blog post awhile ago along with a PowerShell script to help create the tasks and shortcuts to run them.
The problem (as JaredPar suggested) is that you have to make sure that the apps which you have scheduled to run elevated or “as administrator” are protected, and this is especially true if you will run a script. Make sure noone but the administrator(s) can edit or replace that script, or you’re giving away the proverbial keys to the kingdom.