ps_automate for application launching in admin context

Hello ​@maulik shah, 
I just gave it a try in my lab and to me it looks like you are missing  one “ at the end of the RunApp line. 

Here is the ini content I used:

[General]
EnableLogging=4
LogMethod=2

RunApp="powershell -Command "Start-Process PowerShell_ISE -Verb RunAs""

AppWindowTitle="ISE"

[TaskSequence1]
SequenceDelay=40000
Sendkeys=^i

I tested it with the following command in cmd:

ps_automate.exe ini=ise.ini username=User password=pass

and the ISE started as Admin.

Hi Pierre, Thanks for trying . I had powershell_ISE working launched in admin mode but i cannot pass any command laer on 

i.e 

[TaskSequence1]

SequenceDelay=40000

Sendkeys=”Hello World”

Hello Maulik,

Got it now. I must have missed that part as the actual question. Unfortunately, I don't think it will work the way you're hoping. Windows generally prevents non-elevated processes from sending data to elevated processes. So, once ps_automate launches ISE with elevated privileges, it can no longer control the window.

You can make the test work if you run ps_automate from an elevated CMD, but that would require ps_automate itself to be launched with elevation from the start. That doesn't seem like a good general recommendation.

Additionally, using SendKeys wouldn't be advisable. There’s a risk of sending keystrokes to the wrong part of ISE, for example if the Command Add-ons panel is open (View → Show Command Add-on). I’m not sure about your specific use case, but you might want to explore an alternative approach, such as loading an existing script instead of relying on SendKeys.

Hi Pierre ,

My use case is to provide secure managed credential in memory for staff to use in future script block which could be connecting online services. 

I can see you are from beyond trust TAM team, does Password safe has such a out of box future where user can inject credential securely in to managed session or managed application session when needed. 

Regards,

Maulik