On July 29, 2015, a free upgrade to Windows 10 was launched, and many have already taken advantage of this opportunity, because Windows 10 promised increased performance, new features, and most importantly - the most painless transition. However, not all users had a smooth upgrade. For example, an unpleasant surprise could be the blocking of the old printer driver when the new one is simply not released yet. User Account Control (UAC) can now not only ask for your permission to install, but also preemptively block an application or publisher, offering to contact the computer administrator. If the administrator of your personal PC is you yourself, and you have no one to contact, then this article is for you. We offer several options for a possible solution to the problem so that you can find the one that works in your case.
If the program cannot be launched by double-clicking the file, the easiest way is to try to open it with administrator rights.
Disable UAC
You can turn off annoying User Account Control. In some cases, this can help launch the problematic program. To further restrict the functionality of User Account Control, we recommend that you use the Registry Editor.
Command line
You can try giving the command to install from the command line.
Launching the program from the built-in administrator account
This method also helped us, it can be used instead of disabling UAC, if the previous simple manipulations did not help.
- We discussed the inclusion of the built-in administrator account in the corresponding article (LINK) earlier. Choose a convenient method and activate the administrator profile.
- Log in with an administrator account.
- Just run the required installation file. Due to the extremely broad rights of this record, account control will not interfere with your actions. The installation is likely to be successful.
- Log out of the system. Log in with your account. Disable the administrator account as guided by our article (LINK). Under no circumstances use the built-in administrator account for your day-to-day work - this puts your computer at risk. In addition, Metro applications cannot be launched in this mode.
Deleting a file signature
In fact, User Account Control blocks those installation files that have an invalid electronic signature or an expired signature. To solve the problem, the signature of the damaged file signature can be deleted altogether. However, the built-in Windows tools cannot do this, and the process of using additional software (for example, FileUnsigner) is beyond the scope of this article. In general, the process is quite simple:
- Download software to remove the file signature.
- the desired exe file.
- Run the installation file. User Account Control will not block the installation.
Good afternoon, dear readers and blog subscribers, today we will talk about how to open msc windows snap-ins via the command line, what you might need it for and how it will help in the daily practice of a system administrator. Believe the knowledge gained in this article, in the future they will be able to save you a huge amount of time and nerve cells, not to mention the opportunity to show off nerdy knowledge in front of your colleagues, just if you actively use linux systems and know the basic commands in the console, then you will be interested and these. Always, if possible, strive to study, in addition to GUI interfaces, alternative methods of configuration, since when configuring Windows Server, they increasingly choose the core mode with a minimalist interface.
What is msc snap
And so msc in Windows stands for Microsoft System Console, it is even simpler these are windows or, as they are also called snap-ins, to control certain functions of the operating system. Earlier, I already introduced you to the method of creating a convenient mmc snap-in, in which we added everything that a system administrator needs for day-to-day administration.
And you probably ask, what does the command line and all that have to do with it, but what does it have to do with it. Imagine a situation, you have an Active Directory domain in your organization, ordinary users do not have local administrator rights on their workstations, everything goes and works like a clock, a situation happens that, for example, you need to change some settings for a user, and you need to do it now , so there is no time to look for these settings in Group Policy. What to do to go under yourself is not an option, since you need to make changes in another user profile, and how to open, for example, the Computer Management or System snap-in.
This is where knowing the name of msc windows snap-ins and the command line will help us. All you need to do is open a command prompt as administrator and enter the desired name for the msc snap-in. Below is a list. As you can see, after opening the cmd.exe command line, for example, I entered the value that opens the control panel with system administrator rights.
Msc Management Console snap-in items
- appwiz.cpl- The installing and deleting of programms
- certmgr.msc- Certificates
- ciadv.msc - Indexing Service
- cliconfg- SQL Network Client Program
- clipbrd- Clipboard
- compmgmt.msc - Computer management
- dcomcnfg- DCOM Components Management Console
- ddeshare- DDE Shares (does not work on Win7)
- desk.cpl- Screen properties
- devmgmt.msc - Device Manager
- dfrg.msc - Disk defragmentation
- diskmgmt.msc - Disk management
- drwtsn32 - Dr. Watson
- dxdiag - DirectX Diagnostic Service
- eudcedit- Personal character editor
- eventvwr.msc - View events
- firewall.cpl- Windows firewall settings
- gpedit.msc - Group policy
- fsmgmt.msc - Shared folders
- fsquirt- Bluetooth File Transfer Wizard
- chkdsk- Disk check (usually run with parameters drive letter: / f / x / r)
- control printers - Printers and faxes - does not always start
- control admintools - Computer administration - not always started
- control schedtasks - Scheduled tasks (scheduler)
- control userpasswords2 -Account management
- compmgmt.msc - Computer management ( compmgmt.msc / computer \u003d pc - PC remote control)
- lusrmgr.msc - Local users and groups
- mmc- creating your own rig
- mrt.exe - Removal of malware
- msconfig- System setup (autostart, services)
- mstsc- Remote Desktop Connection
- ncpa.cpl - Network connections
- ntmsmgr.msc - Removable memory
- mmsys.cpl - Sound
- ntmsoprq.msc - Requests of operators of removable RAM (for XP)
- odbccp32.cpl - Data source administrator
- perfmon.msc - Performance
- regedit- Registry editor
- rsop.msc - Resultant policy
- secpol.msc - Local Security Settings (Local Security Policy)
- services.msc - Services
- sfc / scannow - Restore system files
- sigverif- File signature verification
- sndvol - volume control
- sysdm.cpl- System properties
- syskey -Database protection of accounts
- taskmgr - Task Manager
- utilmanUtility manager
- verifierDriver Verifier Manager
- wmimgmt.msc - WMI Management Infrastructure
List of msc snap-ins for Windows Server
Let's take a look at how the Windows Administrative Snap-ins are launched from the cmd.exe command line.
- domain.msc - Active Directory domains and trusts
- dsa.msc - Active Directory Users and Computers
- tsadmin.msc - Terminal Services Manager
- gpmc.msc - Group Policy Management Console (GPO)
- gpedit.msc - Group Policy Object Editor
- tscc.msc - Terminal Server Configuration (TS Configuration)
- rrasmgmt.msc - Routing and Remote Access
- dssite.msc - Active Directory Sites and Trusts
- dompol.msc - Domain Security Settings
- dсpol.msc - Domain controller security policy (DC Security Settings)
- dfsgui.msc - Distributed File System (DFS)
- dnsmgmt.msc - DNS
- iscsicpl.exe - ISCSI Initiator
- odbcad32.exe - ODBC Data Source Administrator 32 bit
- odbcad64.exe - 64-bit ODBC Data Source Administrator
- powershell.exe -noexit -command import-module ActiveDirectory - Powershell Active Directory module
- dfrgui.exe - Disk Optimization
- taskschd.msc / s - Task Scheduler
- dsac.exe - Active Directory Administrative Center
- printmanagement.msc - Print management
- vmw.exe - Volume Activation Tool
- eventvwr.msc / s - View events
- adsiedit.msc - ADSIedit Editor
- wbadmin.msc - Windows Server backup system
- ServerManager.exe - Server Manager
As you can see msc windows snap-ins are very useful system administration tools. It's even faster for me to open some snap-ins than to click on a bunch of windows, especially if the server or computer slows down or doesn't have a mouse. And in any case, it is always useful to know such things. Most of everything we use is stored in c: \\ Windows \\ System32. If you go to this folder, you can find a lot of interesting things.
nbtstat -a pc - username of the remote pc machine
net localgroup group user / add - Add to group group, user user
net localgroup group user / delete - Remove user from group
net send pc "" text ""- send a message to the PC user
net sessions- a list of users
net session / delete- closes all network sessions
net use l: \\\\ computer name \\ folder \\ - connect with a network drive l: a folder on a remote computer
net user name / active: no - block user
net user name / active: yes - unblock user
net user name / domain - information about the domain user
net user Name / add - add user
net user Name / delete- delete user
netstat -a - list of all connections to the computer
reg add - Add parameter to registry
reg compare - Compare parts of the registry.
reg copy - Copies from one section to another
reg delete - Removes the specified parameter or section
reg export - Export part of the registry
reg import - Import part of the registry accordingly
reg load - Loads the selected part of the registry
reg query - Displays the values \u200b\u200bof the given registry branch
reg restore - Restores the selected part of the registry from a file
reg save - Saves the selected part of the registry
reg unload - Unloads the selected part of the registry
shutdown - shutdown computer, you can remotely shutdown another.
SystemInfo / s machine - will show a lot of useful information about the remote machine
List of command items of the Windows Control Panel
- control / name Microsoft.AutoPlay - Autoplay
- control / name Microsoft.OfflineFiles - Offline files
- control / name Microsoft.AdministrativeTools - Administration
- control / name Microsoft.BackupAndRestore - Backup and Restore
- control / name Microsoft.WindowsFirewall - Windows Firewall Windows
- control / name Microsoft.Recovery - Recovery
- control / name Microsoft.DesktopGadgets - Desktop Gadgets
- control / name Microsoft.DateAndTime - Date and Time
- control / name Microsoft.DeviceManager - Device Manager
- control / name Microsoft.CredentialManager - Credential Manager
- control / name Microsoft.HomeGroup - HomeGroup
- Windowscontrol / name Microsoft.WindowsDefender - Windows Defender
- control / name Microsoft.Sound - Sound
- control / name Microsoft.NotificationAreaIcons - Notification area icons
- control / name Microsoft.GameControllers - Game devices
- Keyboardcontrol / name Microsoft.Keyboard - Keyboard
- control / name Microsoft.Mouse - Mouse
- control / name Microsoft.TaskbarAndStartMenu - Taskbar and Start Menu
- control - Control Panel
- control / name Microsoft.Fonts - Fonts folder
- control / name Microsoft.IndexingOptions - Indexing options
- control / name Microsoft.FolderOptions - Folder options
- control / name Microsoft.PenAndTouch - Pen and touch devices
- control / name Microsoft.Personalization - Personalization
- control / name Microsoft.RemoteAppAndDesktopConnections - Remote Desktop Connections
- control / name Microsoft.GetPrograms - Get programs
- control / name Microsoft.GettingStarted - Getting Started
- control / name Microsoft.ProgramsAndFeatures - Programs and Features
- control / name Microsoft.DefaultPrograms - Default programs
- control / name Microsoft.SpeechRecognition - Speech recognition
- control / name Microsoft.ParentalControls - Parental Controls
- control / name Microsoft.InternetOptions - Internet Options
- control / name Microsoft.TextToSpeech - Speech Properties
- control / name Microsoft.System - System
- control / name Microsoft.ScannersAndCameras - Scanners and cameras
- control / name Microsoft.PerformanceInformationAndTools - Performance Counters and Tools
- control / name Microsoft.PhoneAndModem - Phone and modem
- control / name Microsoft.ColorManagement - Color management
- control / name Microsoft.Troubleshooting - Troubleshooting
- control / name Microsoft.DevicesAndPrinters - Devices and Printers
- control / name Microsoft.UserAccounts - User Accounts
- control / name Microsoft.MobilityCenter - Mobility Center
- control / name Microsoft.WindowsUpdate - Update Center
- control / name Microsoft.ActionCenter - Support Center
- control / name Microsoft.SyncCenter - Synchronization Center
- control / name Microsoft.EaseOfAccessCenter - Ease of Access Center
- control / name Microsoft.NetworkAndSharingCenter - Network and Sharing Center
- control / name Microsoft.BitLockerDriveEncryption - Drive Encryption
- control / name Microsoft.Display - Screen
- control / name Microsoft.PowerOptions - Power Options
- control / name Microsoft.RegionAndLanguage - Regional and Language Options
If you have something to add to the list of msc canonical names, please write in the comments, I will add them.
Good time, readers. Today, once again, I had to search for the necessary information. Often you have to help Windows users right from your user account, and there are no tools at hand other than the built-in Windows command line cmd.exe.
When working under a restricted account, you often have to perform some task with elevated Administrator rights. cmd for these tasks is the most suitable tool so as not to enter the administrator password many times, it is enough to run the command line once as administrator and perform the necessary actions and run the necessary commands, which I will describe below:
appwiz.cpl - The installing and deleting of programms
certmgr.msc - Certificates
ciadv.msc - Indexing Service
cliconfg - SQL Network Client Program
clipbrd - Clipboard
compmgmt.msc - Computer management
dcomcnfg - DCOM Components Management Console
ddeshare - DDE Shares (does not work on Win7)
desk.cpl - Screen properties
devmgmt.msc - Device Manager
dfrg.msc - Disk defragmentation
diskmgmt.msc - Disk management
drwtsn32 - Dr. Watson
dxdiag - DirectX Diagnostic Service
eudcedit - Personal character editor
eventvwr.msc - View events
firewall.cpl - Windows firewall settings
gpedit.msc - Group policy
iexpress - IExpress (I don't know what it is)
fsmgmt.msc - Shared folders
fsquirt - Bluetooth File Transfer Wizard
chkdsk - Checking disks (usually run with the parameters drive_letter: / f / x / r)
control printers - Printers and faxes - does not always start
control admintools - Computer administration - not always started
control schedtasks - Scheduled tasks (scheduler)
control userpasswords2 - Account management
compmgmt.msc - Computer control (compmgmt.msc / computer \u003d pc - remote computer control pc)
lusrmgr.msc - Local users and groups
mmc- creating your own rig
mrt.exe - Removal of malware
msconfig - System configuration (autostart, services, etc.)
mstsc - Remote Desktop Connection
ncpa.cpl - Network connections
ntmsmgr.msc - Removable memory
ntmsoprq.msc - Requests of operators of removable RAM (for XP)
odbccp32.cpl - Data source administrator
perfmon.msc - Performance
regedit - Registry editor
rsop.msc - Resultant policy
secpol.msc - Local Security Settings (Local Security Policy)
services.msc - Services
sfc / scannow - Restore system files
sigverif - File signature verification
sndvol - volume control
sysdm.cpl - System properties
sysedit - System file editor (don't know what it is)
syskey - Protection of the database of accounts
taskmgr - Task Manager
utilman - Utility manager
verifier - Driver Verifier Manager
wmimgmt.msc - WMI Management Infrastructure
This list is mostly GUI applications. Below I will highlight the console commands in a separate list.
You can also launch applications in the control panel with administrator rights if you right-click while holding the Shift key. And select Run as. (RunAs ...) (relevant for Win XP).
List of console commands:
nbtstat -a pc - username of the remote pc machine
net localgroup group user / add - Add to group group, user user
net localgroup group user / delete - Remove user from group
net send pc "text" - send a message to the pc computer user
net sessions - a list of users
net session / delete - closes all network sessions
net use l: \\\\ computer name \\ folder \\ - connect with a network drive l: a folder on a remote computer
net user name / active: no - block user
net user name / active: yes - unblock user
net user name / domain - information about the domain user
net user Name / add - add user
net user Name / delete - delete user
netstat -a - list of all connections to the computer
reg add - Add parameter to registry
reg compare - Compare parts of the registry.
reg copy - Copies from one section to another
reg delete - Removes the specified parameter or section
reg export - Export part of the registry
reg import - Import part of the registry accordingly
reg load - Loads the selected part of the registry
reg query - Displays the values \u200b\u200bof the given registry branch
reg restore - Restores the selected part of the registry from a file
reg save - Saves the selected part of the registry
reg unload - Unloads the selected part of the registry
shutdown - shutdown computer, you can remotely shutdown another.
SystemInfo / s machine - will show a lot of useful information about the remote machine
Let's find out how to install drivers for an ordinary user if he does not have administrative rights. We will not consider the options for hacking the admin account. Let's walk through more cultural methods.
What are drivers?
These are programs that run at the kernel level of the system. That is, they have full access to the computer, or rather to any device. Naturally, the right to install such programs cannot be trusted by the first comer. That is why only computer administrators can install drivers. But running around every time to establish a connection for a web camera or phone is also not the case - the administrator has enough of his own worries. Let's try to solve this dilemma.
Methods for installing drivers by users without administrative rights
Several methods will be announced below, thanks to which users without administrative rights can install drivers.
Adding a Driver to the Driver Store
Let's remember what are installed automatically! This is because the drivers for such devices are already stored in And this means that these drivers have already been verified and that their installation will not entail undesirable consequences. Therefore, when installing a PnP device, the driver files are copied from the repository to the system location. But in fact, we see that we have picked up the required driver automatically and the device is ready to work. Everyone has enough rights for this. That is, the user can install the printer if the driver store contains the correct driver.
This theory should be enough to suggest the option of installing a device driver by a common user. You need to add the required drivers to the driver store on your computer! In order to place the required driver in the driver store, you must do the following at the command line:
Pnputil -a c: \\ newdrives \\ mydrive.inf
Naturally, the path and name of the inf-file will be the way you need it.
But the device can be installed from the account of a simple user only if available. Even if you added an unsigned driver to the repository, you need administrative rights to initialize it. To solve such problems, you can create certificates for these drivers. But they will only operate within the organization. Creation of certificates is a business of server machines, so we will not consider this for now.
Specify folders with allowed drivers
If you open Registry editor(Execute and introduce regedit) and follow the path hkey_local_machine \\ software \\ microsoft \\ windows \\ current version, You will find the parameter there Device Path, in which the default is % SystemRoot% \\ inf... This parameter specifies where to look for a driver for a newly attached device. You can add any other paths to find the driver separated by commas. Well, if, of course, you have drivers somewhere on your computer, although a more serious step would be to specify the network folder with the drivers. Using this method, you will add a few more places from where the PnP technology can pull drivers, which means that ordinary users can install drivers for the device.
Give access to install some drivers
And the last option is to allow users for specified device classes. The bottom line is to allow users to install drivers for their phones, cameras, webcams and for various other small peripherals. But at the same time, do not open them access to work with the kernel or video card drivers, because inept actions with drivers, for example, a video card, can lead to quite. What needs to be done for this?
Discover device Manager, expand the class of the device you want, select any device and open it Properties... Go to the tab Intelligence and select the item from the list Device class GUIDand. In field The values to appear GUID, right click on GUID and Copy... Then, in the menu Execute recruiting gpedit.msc and click OK... Will open Local Group Policy Editor... Here we sequentially select: Local Computer Policy -\u003e Computer Configuration -\u003e Administrative Templates -\u003e System -\u003e Driver Installation and open the parameter Allow non-admin users to install drivers for these device installation classes... First of all, we activate this function: switch to Enable... Then, below we find the button Show and in the field Value paste the GUID we copied. And in the same way, we allow the installation of all classes of devices that you deem necessary. For all changes to be made to the system, you must restart your computer, either. After that, users without administrative rights will be able to install drivers for non-selected hardware classes.
The last, third installation option is the most effective. Usually, such permissions will be issued for setting up phones, cameras and other small nonsense, which basically automatically grab the necessary drivers. And here the main thing is not to interfere with this. And at the same time close access to the installation of more important drivers.
This is how you can give users rights, and throw off unnecessary work.