There are batch files I often right click on to run as administrator.

As a normal user (with admin privileges) how would I set batch files up to
automatically run as administrator from a double click without always having
to right click to then choose Run as Administrator from the pull down menu?

Right-click on your batch file.
Click Create Shortcut.
Right-click the shortcut file. Click Properties.
In the Shortcuts tab, click Advanced.
Check the Run As Administrator box.
Click Ok to close the dialog box.
Click on Apply to save the changes.

On 8/25/2021 8:31 PM, philo wrote:philo <philo@news.novabbs.com> asked
> Right-click on your batch file.
> Click Create Shortcut.
> Right-click the shortcut file. Click Properties.
> In the Shortcuts tab, click Advanced.
> Check the Run As Administrator box.
> Click Ok to close the dialog box.
> Click on Apply to save the changes.

That worked. Thanks. But it only works for one batch file.

I have hundreds of these batch files (each connects to a different vpn by
managing the router table in a way that requires admin privileges to alter).

All the batch files are four lines of the form:
set configfile=details_of_any_given_vpn_site.ovpn
set configcmd=C:\Program Files\openvpn\bin\openvpn.exe
set configdir=C:\Users\username\vpnconfigs\
%configcmd% %configdir%%configfile%

Is there a global way to do it given the hundreds of batch files correspond
to the hundreds of vpn config files which are placed in various directories?

Found this on Google and did not test.
Might not be a great idea but ...

Log In As Administrator.
Go To Run ( WinKey + R )
Type "secpol.msc"
Go To Local Polices > Security Options.
Find "User Account Control: Switch to the secure desktop when prompting for elevation"
Open It Click Disable It And Click Ok.
Restart Computer( Very Important Log Off Doesn't Work )

On 8/25/2021 9:01 PM, philo wrote:philo <philo@news.novabbs.com> asked
> Found this on Google and did not test.
> Might not be a great idea but ...
> Log In As Administrator.
> Go To Run ( WinKey + R )
> Type "secpol.msc"
> Go To Local Polices > Security Options.
> Find "User Account Control: Switch to the secure desktop when prompting for elevation"
> Open It Click Disable It And Click Ok.
> Restart Computer( Very Important Log Off Doesn't Work )

I appreciate that you have understood the problem set.

I think the method you found just turns off the UAC window.
But it doesn't stop the _need_ to run as administrator in the first place.

To be clear, the only reason I need to run the batch commands as admin is
that the router table can only be managed in an elevated user mode.

Your idea to duplicate each batch file with its corresponding shortcut will
work - but I just have to find a way to do that gracefully without clutter.

Heron.

Your question is a bit light on details, but assuming that %configcmd% is
the one doing those changes and is the same in all the batchfiles why not
try to just elevate that program ?

Regards,
Rudy Wieser

On 8/26/2021 3:52 AM, R.Wieser wrote:
> Heron.
>
> Your question is a bit light on details, but assuming that %configcmd% is
> the one doing those changes and is the same in all the batchfiles why not
> try to just elevate that program ?
>
> Regards,
> Rudy Wieser
>
>
To me this sounds like an owner ship problem. Goto the File (or folder)
Properties, Security, Advance (Near bottom).

Who owns the file? (At Top) Is the owner of the file, the owner of the
account you are working from? If not only the administrator can open an
account that does not belong to the owner of the account.

If not this can casue big problems, especially when you are trying to
shave the file, or folder.

On 8/26/2021 7:47 AM, knuttle wrote:
> On 8/26/2021 3:52 AM, R.Wieser wrote:
>> Heron.
>>
>> Your question is a bit light on details, but assuming that %configcmd% is
>> the one doing those changes and is the same in all the batchfiles why not
>> try to just elevate that program ?
>>
>> Regards,
>> Rudy Wieser
>>
>>
> To me this sounds like an owner ship problem. Goto the File (or folder)
> Properties, Security, Advance (Near bottom).
>
> Who owns the file? (At Top)   Is the owner of the file, the owner of the
> account you are working from?  If not only the administrator can open an
> account that does not belong to the owner of the account.
>
> If not this can casue big problems, especially when you are trying to
> shave the file, or folder.
If you are not the owner of the file or folder, then the simplest way to
resolve your problem is to log off, and then log on as the owner of the
file or folder. Give the owner of the account that you normally uses
permission to use the file or folder.
In your normal account with administrator permissions, you may be able
to give yourself permission to use the file or folder owned by another
account.
By giving your account permission to access the file/folder, you will
not have to override the file/folder permissions as Administrator to
access the file/folder.
PS: I think the gobbledygook. is part of MS security plan. ie if you
make it very complex, the complexity itself provide a degree of
security. Many years ago when I was writing dBase programs, I knew part
of the security was the fact that the people using the programs were
dBase and computer illiterate.

knuttle,

> To me this sounds like an owner ship problem.

You are responding to the wrong person. I'm not the OP.

As such I suggest you read the OPs problem/question first.

> Who owns the file?

There is no indication of a "the file" in the OPs problem/question. Maybe
you can tell him which one you are thinking of ?

Regards,
Rudy Wieser

On 8/26/2021 11:57 AM, R.Wieser wrote:
> knuttle,
>
>> To me this sounds like an owner ship problem.
>
> You are responding to the wrong person. I'm not the OP.
>
> As such I suggest you read the OPs problem/question first.
>
>> Who owns the file?
>
> There is no indication of a "the file" in the OPs problem/question. Maybe
> you can tell him which one you are thinking of ?
>
> Regards,
> Rudy Wieser
>
>
Exe, bat, etc programs are files that contain an execute a routine. As
all files, they are owned by some account. If another accounts want to
access those "file" with out do a "run as administrator" the must have
permission from that owner of the file and the folder they reside.

I was not posting to you but to the thread.

On 8/25/21 9:39 PM, Heron wrote:
> On 8/25/2021 9:01 PM, philo wrote:philo <philo@news.novabbs.com> asked
>> Found this on Google and did not test.
>> Might not be a great idea but ...
>> Log In As Administrator.
>> Go To Run ( WinKey + R )
>> Type "secpol.msc"
>> Go To Local Polices > Security Options.
>> Find "User Account Control: Switch to the secure desktop when
>> prompting for elevation"
>> Open It Click Disable It And Click Ok.
>> Restart Computer( Very Important Log Off Doesn't Work )
>
> I appreciate that you have understood the problem set.
>
> I think the method you found just turns off the UAC window.
> But it doesn't stop the _need_ to run as administrator in the first place.
>
> To be clear, the only reason I need to run the batch commands as admin is
> that the router table can only be managed in an elevated user mode.
>
> Your idea to duplicate each batch file with its corresponding shortcut will
> work - but I just have to find a way to do that gracefully without clutter.

I am guessing now but...
what if you use file explorer and navigate to the folder your batch
files are in and "select all" and see if you can set the policies of all
at once from there>

Worth a try I guess

knuttle,

>> There is no indication of a "the file" in the OPs problem/question. Maybe
>> you can tell him which one you are thinking of ?
....
> Exe, bat, etc programs are files that contain an execute a routine.

Ah yes, just cover everything. That certainly anwers my question about
/which/ file, right ?

Actually ? Nope, it doesn't. It just makes you sound like someone who
hasn't got a clue and tries to bluff himself outof it.

Do yourself a favour and read up on what the OP said before you embarrass
yourself any further.

> I was not posting to you but to the thread.

And for that you had to quote me ? Yeah, that sounds logical. Not.

Kid, just two posts and you have already earned yourself an "untrustworthy"
badge as far as I'm concerned.

Regards,
Rudy Wieser

On 8/26/2021 6:57 PM, philo wrote:philo <philo@privacy.net> asked
> I am guessing now but...
> what if you use file explorer and navigate to the folder your batch
> files are in and "select all" and see if you can set the policies of all
> at once from there>

I'll see what I can do as the problem is easy to reproduce for anyone.
But it only happens on Windows 10 (older Windows versions work just fine).

I'm using the standard freeware openvpn client for Windows 10 over here.
https://openvpn.net/community-downloads/
https://swupdate.openvpn.org/community/releases/OpenVPN-2.5.3-I601-amd64.msi

All it takes to test is a valid free VPN *.ovpn configuration file.
https://www.freeopenvpn.org/index.php
https://www.ovpn.com/en/configurations
https://vanwa.tech/free-openvpn-service

This is one of many batch files, created & owned by the user running it:
set configfile=any_good_free_openvpn_config_file.ovpn
set configcmd=C:\Program Files\openvpn\bin\openvpn.exe
set configdir=C:\Users\username\vpnconfigs\
%configcmd% %configdir%%configfile%

The batch file could be simplified if there is only one test file:
set configfile=C:\Users\username\vpnconfigs\file.ovpn
set configcmd=C:\Program Files\openvpn\bin\openvpn.exe
%configcmd% %configfile%

While manually testing, the _only_ way (so far) it will work is if you right
click the batch file to then select "Run as administrator", or, if you
create a shortcut to the batch file which is set to "Run as administrator."

Anything else (so far) fails due to routing table changes openvpn.exe does.