Jump to content

Windows 10 UAC bypass with ALT-TAB?


rootwrld

Recommended Posts

Posted

I'm trying to run a powershell script as admin, but need to bypass windows UAC. It seems ALT-Y no longer works, but i havent seen any new methods for doing this. Is it just not possible? 

Posted

ALT-TABing through all windows spamming alt-y should work but im not sure how to do this with bunnyscript. Submitted my post a little pre-maturely and cant edit, so making a reply instead. 

Posted

So what exactly doesn't work anymore? The behaviour of UAC hasn't changed in Windows. Alt-y just basically selects the field which starts with a "y", in the UAC case it is "yes". But this only works if the fields says "yes", in other languages, for example german, it would be Alt-j (because of "ja").

You can do a rightarrow followed by enter, which is cross-language.

Posted
On 1/11/2022 at 5:59 AM, kuyaya said:

So what exactly doesn't work anymore? The behaviour of UAC hasn't changed in Windows. Alt-y just basically selects the field which starts with a "y", in the UAC case it is "yes". But this only works if the fields says "yes", in other languages, for example german, it would be Alt-j (because of "ja").

You can do a rightarrow followed by enter, which is cross-language.

UAC seems to no longer be selected when an elevated powershell windows is launched. If you're on 21H1 give it a try. 

Posted
On 1/13/2022 at 2:17 PM, rootwrld said:

UAC seems to no longer be selected when an elevated powershell windows is launched. If you're on 21H1 give it a try. 

Hm, I'm on 20H2, sorry.

Can you make a recording or something like that?

  • 2 weeks later...
Posted

It's a windows feature, the UAC prompt no longer appears within the same context as the other windows. So until you click on it with the mouse it's not within the keyboards context. You can change this with a registry key however.

I can't remember the reg key but if you can find the windows ADMX template for this group policy it'll be in there:

Security Settings > Local Policies > Security Options > User Account Control: Switch to the secure desktop when prompting for elevation to Disabled

Edit:

The registry key is called EnableUIADesktopToggle

More info on that here: https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings

Also just for anybody who's wondering this is NOT a UAC bypass issue, this is handling the UAC prompt when the local user is an administrator.

UAC bypassing is completely different to the OPs issue.

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...