How to Find and Open an Unelevated Command Prompt for Standard Users

Find Open Unelevated Command Prompt as a Standard User

In a Windows environment, system administrators and standard users often need to open a Command Prompt to perform various tasks. An elevated Command Prompt (run as Administrator) can do more than a regular Command Prompt, but sometimes running a command without elevated privileges is necessary or desired.

Why Open an Unelevated Command Prompt?

Running a Command Prompt without elevated privileges can help minimize unintended system changes. For example, when deploying software to a large number of workstations, using a standard user's Command Prompt ensures that the software installs only for that user, and system-wide components are not affected. Additionally, performing updates or installs without elevated privileges reduces the chances of malware infiltration or users making accidental system-wide changes.

How to Open a Command Prompt as a Standard User

Even though it is possible for a user to open an elevated Command Prompt by right-clicking the Start button and selecting "Command Prompt (Admin)," this will open the window using the current user's credentials with administrative privileges. Instead, follow the steps below:

1. Press CTRL+ALT+DELETE and then click on the "Task Manager" option. Alternatively, press CTRL+SHIFT+ESC to open the Task Manager directly.
2. Inside the Task Manager, go to the "File" menu and click on "Run new task."
3. Uncheck the "Create this task with administrative privileges" box and type "cmd" or "Command Prompt" in the "Create new task" dialog.
4. Press the "Enter" or "OK" button. The Command Prompt window will appear without elevated privileges.

Executing Commands in an Unelevated Command Prompt

Once the Command Prompt is open without elevated privileges, the standard user can run various commands, just as an administrator would, but with some limitations. Here are some examples:

Example 1: Running a Program Installation

C:\> msiexec /i c:\path\to\installer.msi

This command installs a program from the specified .msi package without requiring administrator access. However, any system-wide components or registry keys cannot be modified.

Example 2: Creating a Directory

C:\> mkdir c:\path\to\directory

This command creates a new directory without requiring elevated privileges. The standard user must have access permissions for the parent directory where the new directory will be created.

Example 3: Updating Software

C:\> wusa.exe c:\path\to\update.msu

This command updates software using the executable .msu package, typically downloaded from Microsoft Update or Windows Update. Standard users can apply these updates, but only for their user profile and not for the entire system.

Common Applications for an Unelevated Command Prompt

An unelevated Command Prompt can be a helpful tool for standard users and administrators alike. Some common applications are:

• Installing, uninstalling, or updating per-user software and applications.
• Working within a user's profile and sandbox without affecting the entire system.
• Testing command-line tools or scripts that do not require elevated privileges.
• Performing updates on a per-user basis rather than system-wide.

• Opening a Command Prompt as a Standard User can be achieved by pressing CTRL+ALT+DELETE, opening the Task Manager, and running "cmd" without administrative privileges.
• Limited but useful command execution can be done in an unelevated Command Prompt, including software installations and updates, as well as creating directories or moving files.

References

• CMD - Microsoft Docs.
• Msiexec - Microsoft Docs.
• MKDIR - Microsoft Docs.
• WUSA - Microsoft Docs.