Run as Non Domain Admin - Tips

Running as a non-domain admin can be frustrating at times. Typically, when you need to do some moving of files between different systems.

If you use a standard Domain User account but also have a Domain Admin acount, there will be times when you need to launch a Windows Explore window as your Domain Admin account in order to access certain network shares, copy items to from different locations, etc…
This process has worked great for us at my place of work for a few years now.

To get this to work, the below steps have worked for me:

Run as non-domain admin tips – elevating for admin tasks

From an elevated command prompt, run regedit.

Navigate to: HKEY_CLASSES_ROOT\AppID\{CDCBCFCA-3CDC-436f-A4E2-0E02075250C2}

Right click {CDCBCFCA-3CDC-436f-A4E2-0E02075250C2} and select Permissions.

Take ownership with your Domain Admin account.

Give your Domain Admin account Full Control permissions

Add your domain admin account to have full permissions

Expand Component Services | Computers | My Computer | DCOM Config

Right click on Elevated-Unelevated Explorer Factory and select Properties.

On the Identity tab, select The launching user. Press OK and close Component Services.

Remove your Domain Admin account from the registry key permissions you set above.

Switch the ownership back to NT Service\TrustedInstaller.

I’m not sure if the next step is needed, but I do it anyways:

Open up Folder Options.

Select the View tab.

Enable Launch folder windows in a separate process.

Affiliate Links:

[andryfauzan]

i cant switch to trusted installer... help