Search code examples
c#uacdetectionelevated-privileges

Detect if running with elevated privileges? (domain administrator accounts included)

Extending this question: Detect if running as Administrator with or without elevated privileges?

The most voted answer works if the account to "run as administrator" is a local administrator but if you use a domain administrator account the variable isProcessAdmin returns false. In contrast, UAC accepts the Domain Administrator as a valid account when elevating privileges (create folder in c:\windows\, run as administrator, etc)...How can i modify the UACHelper.IsProcessElevated so it takes into account that case too?

Solution

  • You need to pass the domain values to IsInRole:

    // DOMAINNAME\Domain Admins RID: 0x200
bool isElevated = principal.IsInRole(WindowsBuiltInRole.Administrator)
               || principal.IsInRole(0x200);