How does Sudo for Windows work?

Windows has a new feature! In this video, Mike Griese and I will be discussing:

1. How to enable Sudo for Windows
2. A quick technical dive into the different configuration options

If you'd like to learn more, you can check out the full blog post:
[enter link here]

You can also take a look at the Microsoft Learn docs:
[enter link here]

You can also check out the GitHub repository here:
[enter link here]

intro: (0:00)
how to enable sudo: (0:58)
in a new window: (1:32)
input disabled & inline: (3:44)
outro: (9:20)

[mcsweatshop]

just wanted to say i very much appreciate this candid rundown. keep up the good work jordi and mike <3

[ritonlevrai]

Nice feature ! Thanks for your presentation and work :]

[MrMarcLaflamme]

"disableInput" only made sense after it was explained by Mike. Please think about providing verbose descriptions in the settings GUI or changing the name to something else that's a bit more clear. Maybe something like Interactive (for Inline) and Non-Interactive (for disableInput) ? Other than that I'm pretty excited for this! Now all we need is !! to be implemented with Terminal (or maybe an alias can do that?)

[asdfasdfas]

Really helpful, thanks; I appreciate the overview of how this works under the hood.

[DustinBriles]

​ @jordiadoumie1919 I second @RihelB. The Windows and *nix sudo commands are different enough that they should have different names. Copying the name didn't work out so well when "curl" was made an alias for "Invoke-WebRequest". I also don't see many people complaining about e.g. ifconfig vs ipconfig.

If sudo on Windows supports the exact same same syntax, flags, options, etc as sudo on *nix, I could see the case for keeping the names the same since the user-facing functionality would be very similar. But even then, just the UAC prompt alone makes it different enough that I'd call it something else. My natural inclination is that two tools with the same name should do the same thing, and this is not true of sudo on Windows.

All that being said, I LOVE this idea of making something better than "runas". Good job!

[RihelB]

Should have either adopted gsudo or named differently like "wsudo" since this would have differentiate from the linux equivalent.

[sandpapr]

Are there any plans on the roadmap to implement something like a 'sudoers' file to lock things down or would we have to use a combination of group policy and permissions? The granularity of using 'sudoers' would be a boon to organizations that have different administrative tiers/responsibilities within IT.

[mytskse]

looks dope! I recon Sudo should suppress UAC prompts in near future?

[joshodell]

Is it possible to enter the admin credentials for sudo within the console versus a UAC prompt, similar to other operating systems?

[jonathanmaximilianoacevesr]

I have been having trouble using sudo apt and sudo yum, its still not available this commands? is there a different way to type it so I could run them?

[DBitRun]

Do I have to be an Insider to enable this option? I enable Developer mode and I don't see this option. If it's required, can I enable Sudo without being an Insider? Thanks.

[aleksevgeny]

OK. I tried running the following commands:
sudo Get-WindowsUpdate
sudo Get-AppPackage
sudo Get-Disk
None of them seem to work. In fact, none of the "command" list commands seem to work. I keep getting the same message: "Command not found". Am I doing something wrong? Is it not ready yet or something?

[djdevelops]

This is pretty awesome! But having to click a pop up is pretty tacky, is this just a windows quirk? Id rather have to type in a password and run it in the same window instead

[shurizzle]

Yo dawg, I heard you like sudo... please, make `sudo config` requesting for confirmation automatically instead of launching sudo config with sudo...

[mattcargile]

Would have been nice to use actual powershell instead of the dated netstat command.

[pappvasile]

Why there should be a "sudo" command at all? since there is a "runas" command already for the same thing with plenty of options.

[wil]

It really should be you get the UAC prompt once, then those privileges remain in that console window for X amount of minutes, like how Sudo for Linux works.

Close...but not perfect.

[striperseeker]

seems no different than having to launch an Admin CMD and running netstat from the prompt. A true sudo-like implementation would be running sudo "command" from a non-admin cmd prompt

[redcoreit]

I really like this feature but that UAC popup everytime… I don’t know man.

[ciphernemo]

4:43 lol! Looks like someone is running Steam on their work PC. But "it's work work and compatibility testing with Steam", right? 😉