User Mode VS Service Mode

[codemonkee (Tim)]

@codemonkee

So far the only way I’ve found around it is to Disable “User Account Control: Run all administrators in Admin Approval Mode”.

Thank you for the follow up.

@radutzp

From unattended we don’t and we’ll never support running processes with elevated rights. It’s too big of a security risk. If Orchestrator gets compromised, it means the attacker would also have admin access to all the machines connected to it.

In my test scenario what I was working with is

• Grant a specific domain [robot] account to the local administrator group of a single robot host machine.
• Disable “User Account Control: Run all administrators in Admin Approval Mode”.

Although I wouldn’t want to disable security in such as way; this approach would not be as sever as you suggest, would you agree with that? (though I do understand that it wouldn’t be support, purely from a technical interest and not having a Windows background).