MakeMeAdmin icon indicating copy to clipboard operation
MakeMeAdmin copied to clipboard

Remove Administrator Rights Problem

Open MichalisDBA opened this issue 1 year ago • 6 comments

Hello.

I attach a screen record for better explanation.

Tha problem is that when you press Remove my Admin rights, you are still having admin rights until you logoff and logon again or reboot the computer.

https://github.com/pseymour/MakeMeAdmin/assets/68512501/59b83cb2-71ed-48b3-a90a-5d7a4b466e4a

MichalisDBA avatar Feb 15 '24 10:02 MichalisDBA

Yes, that looks correct if "Remove Admin Rights On Logout" is not set.

pseymour avatar Feb 15 '24 23:02 pseymour

I wanted to point out that although you press Remove My Administrator Rights you still have them unless you logoff and logon again. This defies the purpose to become a normal user when you press this button.

MichalisDBA avatar Feb 16 '24 08:02 MichalisDBA

As I understand it, this is not a problem with Make Me Admin specifically, but due to how Windows handles user rights & group memberships. The user token is constructed at logon when group membership is checked, and remains the same for that logon session. It's why when adding a user to an Active Directory or Entra group the documentation always says to log off & on again, so that the token is refreshed with the new group membership :)

chris18890 avatar Feb 16 '24 11:02 chris18890

Chris is exactly correct.

pseymour avatar Feb 16 '24 15:02 pseymour

it timed out for us ... no log in or out needed.. what I wanna know is if makemeadmin allows standard user to permanently add themselves with an elevated command prompt like this: net localgroup administrators /add username ultimately bypassing the need for makemeadmin once completed.? also.. how possible is it to incorporate totp passcodes into this?? i love this program :D

ludikris avatar Mar 28 '24 19:03 ludikris

@ludikris Yes, it does. You're allowing the user to gain administrative rights. They can do anything an administrator can do.

pseymour avatar Mar 30 '24 02:03 pseymour