Open &#39;powershell as administrator&#39; tabs (as a profile type) #970

@mdtauk commented on GitHub (May 13, 2019):

Without implementing a per command UAC elevation similar to 'nix's Sudo for all the various consoles and WSL - I think a Process per Tab implementation, with a UAC prompt on profile adding would be sensible.

It will require security protection and all the careful coding needed to make it possible, so may not be an achievable V1 goal.

@mdtauk commented on GitHub (May 13, 2019): Without implementing a per command UAC elevation similar to 'nix's **Sudo** for all the various consoles and WSL - I think a _Process per Tab_ implementation, with a UAC prompt on profile adding would be sensible. It will require security protection and all the careful coding needed to make it possible, so may not be an achievable V1 goal.

claunia commented

@zadjii-msft commented on GitHub (May 13, 2019):

This is a dupe of #632, so I'll redirect discussion there.

@zadjii-msft commented on GitHub (May 13, 2019): This is a dupe of #632, so I'll redirect discussion there.

claunia commented

@heyJonBray commented on GitHub (Sep 2, 2020):

Wouldn't it be possible to change the "commandLine" : "powershell.exe /profile <elevated user profile .pc1 file>" variable to the PS function(s) you would do within the ISE to start a profile in elevated mode?

@heyJonBray commented on GitHub (Sep 2, 2020): Wouldn't it be possible to change the `"commandLine" : "powershell.exe /profile <elevated user profile .pc1 file>"` variable to the PS function(s) you would do within the ISE to start a profile in elevated mode?

claunia commented

@ckasabula commented on GitHub (Dec 1, 2020):

Have been using ConEmu for years, which supports a mix of elevated and non-elevated tabs. I was thinking Windows Terminal would be a good alternative, but I don't want to run 2 instances when I can run just 1 ConEmu instance.

@ckasabula commented on GitHub (Dec 1, 2020): Have been using ConEmu for years, which supports a mix of elevated and non-elevated tabs. I was thinking Windows Terminal would be a good alternative, but I don't want to run 2 instances when I can run just 1 ConEmu instance.

claunia commented

@mikemaccana commented on GitHub (Dec 1, 2020):

All: there's no doubting that various other apps have the ability to run elevated instances inside them, the reason Microsoft haven't added this feature for Terminal yet is that's there's a security risk within Windows of doing so. The other apps have that security risk, Microsoft for good reason don't want to expose their users.

With any luck Microsoft folk might fix Windows itself to allow elevated subprocesses (which may be very difficult), but otherwise the best best is for some other solution (eg, the ability to spawn a separate elevated window being easier)

@mikemaccana commented on GitHub (Dec 1, 2020): All: there's no doubting that various other apps have the ability to run elevated instances inside them, the reason Microsoft haven't added this feature for Terminal yet is that's there's a security risk within Windows of doing so. The other apps have that security risk, Microsoft for good reason don't want to expose their users. With any luck Microsoft folk might fix Windows itself to allow elevated subprocesses (which may be very difficult), but otherwise the best best is for some other solution (eg, the ability to spawn a separate elevated window being easier)

claunia commented

@zadjii-msft commented on GitHub (Dec 1, 2020):

@ckasabula Thanks for the feedback, but we won't be allowing mixed elevated and unelevated instances in the same window, because it presents too large a security risk. You can refer to this thread: https://github.com/microsoft/terminal/issues/632#issuecomment-519375707 for more details. ConEmu can offer that functionality and accept that risk, but unfortunately we can't.

@zadjii-msft commented on GitHub (Dec 1, 2020): @ckasabula Thanks for the feedback, but we won't be allowing mixed elevated and unelevated instances in the same window, because it presents too large a security risk. You can refer to this thread: https://github.com/microsoft/terminal/issues/632#issuecomment-519375707 for more details. ConEmu can offer that functionality and accept that risk, but unfortunately we can't.

claunia commented

@dranovsk commented on GitHub (Feb 13, 2021):

Try gsudo as workaround.

@dranovsk commented on GitHub (Feb 13, 2021): Try [gsudo](https://github.com/gerardog/gsudo) as workaround.

claunia commented

@survivant commented on GitHub (Mar 6, 2021):

it's the first time that I'm using Windows Terminal. Really nice to have PowerShell and WSL in a terminal. But I still don't understand why I can't have a tab with PowerShell as Administrator. In my taskbar I have Powershell pinned there and I right click on it.. Open as Administrator. Why can I have the same thing with Windows Terminal ? I'm never using powershell and cmd.exe in normal user.

@survivant commented on GitHub (Mar 6, 2021): it's the first time that I'm using Windows Terminal. Really nice to have PowerShell and WSL in a terminal. But I still don't understand why I can't have a tab with PowerShell as Administrator. In my taskbar I have Powershell pinned there and I right click on it.. Open as Administrator. Why can I have the same thing with Windows Terminal ? I'm never using powershell and cmd.exe in normal user.

claunia commented

@zadjii-msft commented on GitHub (Mar 15, 2021):

@survivant I mean, you can definitely open the Terminal as an administrator:

We're just not going to let you put elevated instances inside an unelevated window. There's a bunch of other quality-of-life improvements for running the terminal elevated we've got planned over in #8455.

@zadjii-msft commented on GitHub (Mar 15, 2021): @survivant I mean, you can definitely open the Terminal as an administrator: ![image](https://user-images.githubusercontent.com/18356694/111172829-2649bf80-8574-11eb-8a20-658c272eea78.png) We're just not going to let you put elevated instances inside an unelevated window. There's a bunch of other quality-of-life improvements for running the terminal elevated we've got planned over in #8455.

claunia commented

@PanosGreg commented on GitHub (Apr 18, 2021):

kudos to @dranovsk for the gsudo mention!
to install just: choco install gsudo -y (from an elevated console, you need chocolatey obviously)

Just create a new windows terminal tab, for ex. PowerShell (Admin)
and then in the command line text field: gsudo pwsh
and that's it, every time you open that tab, you'll get a UAC prompt (cause it 's an elevated process)
and in the end, you'll have normal (non-elevated) tabs and elevated (admin) tabs in the same windows terminal app.

Also, to distinguish the tab from the regular PowerShell, here's an icon with red powershell
Powershell ico Files

@PanosGreg commented on GitHub (Apr 18, 2021): kudos to @dranovsk for the gsudo mention! to install just: `choco install gsudo -y` (from an elevated console, you need chocolatey obviously) Just create a new windows terminal tab, for ex. _PowerShell (Admin)_ and then in the command line text field: `gsudo pwsh` and that's it, every time you open that tab, you'll get a UAC prompt (cause it 's an elevated process) and in the end, you'll have normal (non-elevated) tabs and elevated (admin) tabs in the same windows terminal app. Also, to distinguish the tab from the regular PowerShell, here's an icon with red powershell [Powershell ico Files](https://drive.google.com/drive/folders/1DRlxa1wnbf9xbOplVNxCiTFRfmw2P6Lv)

claunia commented

@RobBiddle commented on GitHub (May 5, 2021):

I understand there's a potential security risk of running elevated console tabs inside a non-elevated Windows Terminal. But what about enabling the opposite workflow?

As long as Windows Terminal was launched with elevated privileges then why not allow for additional non-elevated console tabs to be created?

@RobBiddle commented on GitHub (May 5, 2021): I understand there's a potential security risk of running elevated console tabs inside a non-elevated Windows Terminal. But what about enabling the opposite workflow? As long as Windows Terminal was launched with elevated privileges then why not allow for additional non-elevated console tabs to be created?

claunia commented

@flatline-studios commented on GitHub (May 17, 2021):

kudos to @dranovsk for the gsudo mention!
to install just: choco install gsudo -y (from an elevated console, you need chocolatey obviously)

Just create a new windows terminal tab, for ex. PowerShell (Admin)
and then in the command line text field: gsudo pwsh
and that's it, every time you open that tab, you'll get a UAC prompt (cause it 's an elevated process)
and in the end, you'll have normal (non-elevated) tabs and elevated (admin) tabs in the same windows terminal app.

Also, to distinguish the tab from the regular PowerShell, here's an icon with red powershell
Powershell ico Files

I get:

> gsudo pwsh
pwsh : The term 'pwsh' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify
that the path is correct and try again.
At line:1 char:1
+ pwsh
+ ~~~~
    + CategoryInfo          : ObjectNotFound: (pwsh:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

To fix it, instead just change either the "Command line" box in the settings to read, powershell.exe gsudo, or, if you're working directly with the settings JSON file, then have the line "commandline": "powershell.exe gsudo" in your profiles list.

@flatline-studios commented on GitHub (May 17, 2021): > kudos to @dranovsk for the gsudo mention! > to install just: `choco install gsudo -y` (from an elevated console, you need chocolatey obviously) > > Just create a new windows terminal tab, for ex. _PowerShell (Admin)_ > and then in the command line text field: `gsudo pwsh` > and that's it, every time you open that tab, you'll get a UAC prompt (cause it 's an elevated process) > and in the end, you'll have normal (non-elevated) tabs and elevated (admin) tabs in the same windows terminal app. > > Also, to distinguish the tab from the regular PowerShell, here's an icon with red powershell > [Powershell ico Files](https://drive.google.com/drive/folders/1DRlxa1wnbf9xbOplVNxCiTFRfmw2P6Lv) I get: ``` > gsudo pwsh pwsh : The term 'pwsh' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + pwsh + ~~~~ + CategoryInfo : ObjectNotFound: (pwsh:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException ``` To fix it, instead just change either the "Command line" box in the settings to read, `powershell.exe gsudo`, or, if you're working directly with the settings JSON file, then have the line `"commandline": "powershell.exe gsudo"` in your profiles list.

claunia commented

@ghost commented on GitHub (May 21, 2021):

kudos to @dranovsk for the gsudo mention!
to install just: choco install gsudo -y (from an elevated console, you need chocolatey obviously)

Just create a new windows terminal tab, for ex. PowerShell (Admin)
and then in the command line text field: gsudo pwsh
and that's it, every time you open that tab, you'll get a UAC prompt (cause it 's an elevated process)
and in the end, you'll have normal (non-elevated) tabs and elevated (admin) tabs in the same windows terminal app.

Also, to distinguish the tab from the regular PowerShell, here's an icon with red powershell
Powershell ico Files

Thanks to @PanosGreg for this tip!

FYI: If you're using Powershell 7.x (aka Powershell Core, pwsh) you'll want to use gsudo pwsh.exe

@ghost commented on GitHub (May 21, 2021): > kudos to @dranovsk for the gsudo mention! > to install just: `choco install gsudo -y` (from an elevated console, you need chocolatey obviously) > > Just create a new windows terminal tab, for ex. _PowerShell (Admin)_ > and then in the command line text field: `gsudo pwsh` > and that's it, every time you open that tab, you'll get a UAC prompt (cause it 's an elevated process) > and in the end, you'll have normal (non-elevated) tabs and elevated (admin) tabs in the same windows terminal app. > > Also, to distinguish the tab from the regular PowerShell, here's an icon with red powershell > [Powershell ico Files](https://drive.google.com/drive/folders/1DRlxa1wnbf9xbOplVNxCiTFRfmw2P6Lv) Thanks to @PanosGreg for this tip! FYI: If you're using Powershell 7.x (aka Powershell Core, **pwsh**) you'll want to use `gsudo pwsh.exe`

claunia commented

@ylluminate commented on GitHub (Jun 6, 2021):

Thanks so much for the gsudo pwsh.exe tip @PanosGreg - shame Microsoft doesn't work towards developer intuitiveness and needs like Apple once did (and now doesn't either).

Tip: after doing the above you have to also restart Terminal if you've had it running while installing Chocolatey + gsudo.

@ylluminate commented on GitHub (Jun 6, 2021): Thanks so much for the `gsudo pwsh.exe` tip @PanosGreg - shame Microsoft doesn't work towards developer intuitiveness and needs like Apple once did (and now doesn't either). Tip: after doing the above you have to also restart Terminal if you've had it running while installing Chocolatey + gsudo.

claunia commented

@oising commented on GitHub (Jun 11, 2021):

shame Microsoft doesn't work towards developer intuitiveness and needs

@ylluminate This is completely unfounded and absolutely incorrect. Balancing intuitiveness/easy of use and security is a delicate dance, and one that Microsoft does far better in the last ten to fifteen years than Apple ever has. The reason you're seeing Apple leaning this way now too is that they too are coming to grips with this balance.

@oising commented on GitHub (Jun 11, 2021): > shame Microsoft doesn't work towards developer intuitiveness and needs @ylluminate This is completely unfounded and absolutely incorrect. Balancing intuitiveness/easy of use and security is a delicate dance, and one that Microsoft does far better in the last ten to fifteen years than Apple ever has. The reason you're seeing Apple leaning this way now too is that they too are coming to grips with this balance.

claunia commented

@ylluminate commented on GitHub (Jun 11, 2021):

@oising after 30 years of experience in this area I'm allowed to disagree with you and could also demonstrably say that you're wrong with unequivocal refutation, but we'll stop this now before it get's too hot in here.

@ylluminate commented on GitHub (Jun 11, 2021): @oising after 30 years of experience in this area I'm allowed to disagree with you and could also demonstrably say that you're wrong with **_unequivocal refutation_**, but we'll stop this now before it get's too hot in here.

claunia commented

@oising commented on GitHub (Jun 11, 2021):

@oising after 30 years of experience in this area I'm allowed to disagree with you and could also demonstrably say that you're wrong with unequivocal refutation, but we'll stop this now before it get's too hot in here.

You can disagree with me anyway you wish, but it's less convincing if you attempt to do so via argumentum ad verecundiam ;) Have a nice day.

@oising commented on GitHub (Jun 11, 2021): > @oising after 30 years of experience in this area I'm allowed to disagree with you and could also demonstrably say that you're wrong with **_unequivocal refutation_**, but we'll stop this now before it get's too hot in here. You can disagree with me anyway you wish, but it's less convincing if you attempt to do so via _**argumentum ad verecundiam**_ ;) Have a nice day.

claunia commented

@ylluminate commented on GitHub (Jun 11, 2021):

@oising do you really want to do this here? I fully perceive you as doing exactly the same thing with regards to verecundiam and believe you made a baseless (sans foundational logic) statement.

@ylluminate commented on GitHub (Jun 11, 2021): @oising do you really want to do this here? I fully perceive you as doing exactly the same thing with regards to `verecundiam` and believe you made a baseless (sans foundational logic) statement.

claunia commented