AdminOnDemand 1.4 released May 11, 2022 - Document updated May 11, 2022
...
Description
AdminOnDemand allows standard users without local administrator permissions to execute EXE and MSI files with elevated privileges.
...
| Expand | ||
|---|---|---|
| ||
If User Account Control is disabled, an “access denied” message is presented.  If User Account Control is enabled, but not configured correctly, a “blocking” message is presented.  |
...
Process Elevation Rules
Child Processes
| Expand |
|---|
All applications that use the Windows Command Prompt (cmd.exe) rely on the Console Window Host (conhost.exe) process to interact with other Windows components. As an example, the Console Window Host makes it possible to drag and drop files and folders from Windows Explorer to Windows Command Prompt. It is not uncommon to see multiple instances of the Console Window Host in the Task Manager.  PowerShell and Command Prompt both rely on the Console Window Host. As a result, you need to either allow all child processes or specifically conhost.exe when you create a process elevation rule that allows powershell.exe or cmd.exe  |
...
Known Issues
Time Sync
| Expand |
|---|
If the time on the device with AdminOnDemand is ahead of the time on the device used to view the dashboard, then the information on the dashboard is not presented accurately. The issue will not affect devices where the time on the device with AdminOnDemand is behind the time on the device used to view the dashboard. The issue will not affect devices where the time is not synchronized because of different time zones.
|
Child Processes
| Expand |
|---|
All applications that use the Windows Command Prompt (cmd.exe) rely on the Console Window Host (conhost.exe) process to interact with other Windows components. As an example, the Console Window Host makes it possible to drag and drop files and folders from Windows Explorer to Windows Command Prompt. It is not uncommon to see multiple instances of the Console Window Host in the Task Manager. PowerShell and Command Prompt both rely on the Console Window Host. As a result, you need to either allow all child processes or specifically conhostexe when you create a process elevation rule that allows powershell.exe or cmd.exe |