7 comments on “Abusing MSI’s elevated privileges

  1. MSDN link states:
    “Note that once the per-machine policy for AlwaysInstallElevated is enabled, any user can set their per-user setting.”

    ie as long as HKLM is value is set you should be able to:
    ‘reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\Installer /v AlwaysInstallElevated /d 1’

    And then run your elevated MSI.

  2. I forgot to also mention that if you are testing, you can just add the entry with admin rights and then logon as a non-admin user to test it out.

Leave a Reply

Your email address will not be published. Required fields are marked *