Hacker News Reader

There's a 'run as' mechanism built in and accessible via GUI inside of Task Manager (File -> Run New Task) and the command prompt ('runas'). You can also open an Administrator Command Prompt.

At work, we have an applied policy that shows an elevated prompt for most things that need admin permissions. It's apparently one of those hidden UAC settings that either needs GPO or regedit to enable. So it's there, just not really exposed to end users.

> enormously

[citation needed]

https://xkcd.com/1200/

What is the valuable thing for an attacker?

User data, credentials? Available as a user

Computer capacities for mining? Available as a user

Installing persistence? Available as a user

Installing remote management? Available as a user

It's crazy, if you don't separate your admin account, the UAC prompt can be bypassed due to the default settings.