{"id":11517,"date":"2023-02-12T22:34:55","date_gmt":"2023-02-13T06:34:55","guid":{"rendered":"https:\/\/www.coretechnologies.com\/blog\/?p=11517"},"modified":"2023-02-12T22:34:55","modified_gmt":"2023-02-13T06:34:55","slug":"start-service-without-admin-rights","status":"publish","type":"post","link":"https:\/\/www.coretechnologies.com\/blog\/alwaysup\/start-service-without-admin-rights\/","title":{"rendered":"Q&A: How can a Non-Admin User Start my AlwaysUp Service?"},"content":{"rendered":"
\"How<\/div>\n
\n  Hi — long time user of AlwaysUp here!<\/p>\n

I followed your suggestion in the FAQ to allow my non-admin user to control<\/a> the Windows Service that AlwaysUp created. Now he can run the NET command to start and stop our application in Session 0 whenever he likes, which is great. But we’re still having one problem.<\/p>\n

Sometimes the user needs to start the application in the current session to make changes. The user manual<\/a> says that running AlwaysUp.exe with the “-restart-in-current-session” parameter will do the trick.<\/p>\n

And that command works fine for me (I’m an admin). However, the non-admin user is prompted for admin credentials because his account doesn’t have the rights to run AlwaysUp.<\/p>\n

Is there any way to start AlwaysUp.exe without needing admin credentials?<\/p>\n

— Steve<\/p>\n<\/div>\n

Hi Steve. Thanks for getting in touch — and for being a loyal customer!<\/p>\n

Permissions is always a thorny topic but we can help you. Let’s start by reviewing why there is no direct remedy from the AlwaysUp executable (AlwaysUp.exe).<\/p>\n

AlwaysUp needs admin rights to do its work<\/h2>\n

Unfortunately it’s not possible to launch AlwaysUp without elevated rights. That’s because AlwaysUp needs to:<\/p>\n

    \n
  1. \n

    Read, create and update your Windows Services<\/p>\n<\/li>\n

  2. \n

    Interrogate the Windows Event logs for errors and warnings<\/p>\n<\/li>\n

  3. \n

    Carefully monitor your important applications and react quickly when they use too much memory, hog the CPU, hang or crash.<\/p>\n<\/li>\n<\/ol>\n

    Typically only administrators — with broad access to low-level systems — can perform those actions.<\/p>\n

    So your non-admin user won’t be able to run AlwaysUp.exe. But as you know, there are other ways to start or stop the Windows Service created by AlwaysUp. Let’s explore the NET command since you’re already familiar with how it works.<\/p>\n

    Use NET to start your application in a given session<\/h2>\n

    To recap, you’re already using the NET command to start your application. If your application is called “MyServer” in AlwaysUp, then this command will do the trick:<\/p>\n

    \nNET START "MyServer (managed by AlwaysUpService)"\n<\/div>\n

    Notice that you must add the "(managed by AlwaysUpService)" suffix as that is how the service is named in the Service Control Manager<\/a>.<\/p>\n

    In any case, running that command instructs AlwaysUp to start your application in Session 0<\/b> — the background desktop hosting Windows Services. You won’t see the application on your normal desktop.<\/p>\n

    Fortunately slight variants of the NET command will enable you to launch your application in a specific session.<\/p>\n

    Provide a Session ID<\/h3>\n

    To start in a specific session, add the session’s numeric identifier (the Session ID) to the command. The format is:<\/p>\n

    \nNET START "<ApplicationName> (managed by AlwaysUpService)" \/<SessionID>\n<\/div>\n

    For example, to start “MyServer” in Session 2, run:<\/p>\n

    \nNET START "MyServer (managed by AlwaysUpService)" \/2\n<\/div>\n

    That will launch your application in Session 2, regardless of who is logged in there.<\/p>\n

    Provide a Windows username<\/h3>\n

    Alternately, you can pass a username to start the application in the session occupied by that Windows user. The format of that command is:<\/p>\n

    \nNET START "<ApplicationName> (managed by AlwaysUpService)" \/"user:<UserName>"<\/b>\n<\/div>\n

    For example, to start “MyServer” in the session where “psmith” is logged in, run:<\/p>\n

    \nNET START "MyServer (managed by AlwaysUpService)" \/"user:psmith"<\/b>\n<\/div>\n

    Note that if the given user is not logged in, AlwaysUp will start the application in Session 0.<\/p>\n

    How to use NET to start your application in the current session<\/h2>\n

    To achieve what you’re trying to do, we recommend going with the username variant of the NET command.<\/p>\n

    This command — which features the USERNAME environment variable<\/a> — will start your application on the current user’s desktop:<\/p>\n

    \nNET START "<ApplicationName> (managed by AlwaysUpService)" \/"user:%USERNAME%"<\/b>\n<\/div>\n

    Again, if your application is called “MyServer”, the precise syntax is:<\/p>\n

    \nNET START "MyServer (managed by AlwaysUpService)" \/"user:%USERNAME%"<\/b>\n<\/div>\n

    When you run the command, %USERNAME% expands to the username of the account invoking the command. In that way, the command works for whoever runs it.<\/p>\n

    We recommend saving the command to a batch file and placing the file on the user’s desktop, for easy access. With that, your application will only be a double-click away.<\/p>\n

    \nEnjoy!\n<\/p>\n

    \n
    \n\n\n\n
    Read more articles about AlwaysUp…<\/nobr><\/span><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n