Recently, we encountered an unusual situation that happens within our software when using Command Prompt on Windows, with Heimdal™ Privileged Access Management enabled.
After clicking on the "ELEVATE" button from our Heimdal™ Client, and stating the elevation reason, with a pop up located in the bottom right on your screen, allowing full administrator rights for your machine.
If you run the Windows Command Prompt with administrator rights within the elevated right time frame you`ll receive full administrator access on your machine, which will not be removed once the timer will end, and you can spawn any other process you want, even if the "Access Removed" message shows on your machine.
This is due to the Windows OS processes functionality: a process spawned from another process keeps the rights of its parent.
0 Comments
Article is closed for comments.