windows portable elevation doc

Signed-off-by: 21pages <pages21@163.com>
This commit is contained in:
21pages 2023-08-27 20:18:53 +08:00
parent bdba2946c7
commit 7b245a4a8b
8 changed files with 99 additions and 0 deletions

View File

@ -0,0 +1,47 @@
---
title: Windows Portable Elevation
weight: 4
---
Windows portable programs do not have administrator privileges, which can lead to the following issues:
- The screen cannot be transmitted when the UAC (User Account Control) window pops up.
- When an elevated window, such as the Task Manager, pops up, the mouse becomes unresponsive.
By elevating privileges, RustDesk can create a process with administrator privileges during startup or a session, enabling it to perform screenshotting and mouse operations, thereby avoiding the above problems
### Elevate at startup
This way, remote users don't need to request elevation when connecting. There are two methods:
* Method 1: Change the name of the portable program to end with `qs.exe`. Click the left mouse button to run, click "Accept" in the UAC window.
* Method 2: Right-click and run as administrator.
### Elevate at the controlled end
The controlled end can directly click `Accept and Elevate` when connecting, or click `Elevate` when already connected.
| connecting | connected |
| :-------------------------------------------------: | :-----------------------------------------------: |
| ![](/docs/en/client/Windows%20Portable%20Elevation/images/cm_unauth.jpg) | ![](/docs/en/client/Windows%20Portable%20Elevation/images/cm_auth.jpg) |
### Request elevation at the control end
After selecting `Request Elevation` from the action menu, the following dialog box will appear. If you choose `Ask the remote user for authentication`, you won't need to input a username and password, but the user on the remote computer must have administrator privileges. If you select `Transmit the username and password of administrator"`, the user on the remote computer only needs to accept in the UAC window. After sending the request, please wait for the user on the other side to accept the UAC window. Upon confirmation, a success message will appear. Note that **both methods require someone on the controlled end to accept the UAC window**. Therefore, if there is no one available on the other side, elevation should not be requested at the control end.
| menu | dialog |
| :--------------------------------------------: | :-----------------------------------------------: |
| ![](/docs/en/client/Windows%20Portable%20Elevation/images/menu.png) | ![](/docs/en/client/Windows%20Portable%20Elevation/images/dialog.png) |
| **wait** | **success** |
| ![](/docs/en/client/Windows%20Portable%20Elevation/images/wait.png) | ![](/docs/en/client/Windows%20Portable%20Elevation/images/success.png) |
### How to Choose
| Scenario | Method |
| :--------------------------------------: | :--------------------------------------: |
| No elevation required | Install the program |
| No user available at the controlled end | Rename<br/>*or*<br/> Run with administrator |
| User available at the controlled end<br/>*&&*<br/> Immediate elevation when connected<br/> *&&*<br/> Accept-via-click connection | Click `Accept and Elevate` when receiving the connection at the controlled end |
| User available at the controlled end<br/>*&&*<br/> elevation as needed | Click `Elevate` on the connection management window at the controlled end<br/>*or*<br/> Request elevation at the control end |

View File

@ -0,0 +1,52 @@
---
title: Windows Portable 提权
weight: 4
---
在Windows下Portable程序没有管理员权限这会导致以下问题
* 当UAC用户账户控制窗口弹出时画面无法传输。
* 当弹出被提权的窗口(如任务管理器)时,鼠标操作不响应。
通过提权, RustDesk在启动时或会话过程中可以创建一个具有管理员权限的进程用于截屏和鼠标操作从而避免了上述问题。
### 启动时提权
这种方式,连接时不需要再请求提升。有两种方法:
* 方法一更改portable程序的名称以`qs.exe`结尾。鼠标左键点击运行并在UAC窗口点击允许。
* 方法二: 右键以管理员权限运行。
### 被控端主动提权
被控端可以在对方发起连接时,直接点击`接受并提权`,或在已经连接的情况下点击`提权`。
| 正在连接 | 已连接 |
| :--------------------------------------: | :--------------------------------------: |
| ![](/docs/en/client/Windows%20Portable%20Elevation/images/cm_unauth.jpg) | ![](/docs/en/client/Windows%20Portable%20Elevation/images/cm_auth.jpg) |
### 控制端主动提权
在点击动作菜单中的`请求提权`后,将弹出下面的对话框。如果选择`请求远程用户授权`,则无需输入用户名和密码,但需要电脑对面的用户具有管理员权限。如果选择`发送管理员用户的账号和密码`则只需要对面用户在UAC窗口点击确认。发送请求后请等待对面用户确认UAC窗口, 然后将提示成功。需要注意的是,这两种方式**都需要被控端有人在UAC窗口点击确认**。因此,如果对面没有人,则被控端不应该主动请求提权。
| 菜单 | 对话框 |
| :--------------------------------------: | :--------------------------------------: |
| ![](/docs/en/client/Windows%20Portable%20Elevation/images/menu.png) | ![](/docs/en/client/Windows%20Portable%20Elevation/images/dialog.png) |
| **等待** | **成功** |
| ![](/docs/en/client/Windows%20Portable%20Elevation/images/wait.png) | ![](/docs/en/client/Windows%20Portable%20Elevation/images/success.png) |
### 如何选择
| 情形 | 方式 |
| :------------------------------: | :------------------------: |
| 无需处理提权 | 安装程序 |
| 被控端没有人 | 重命名<br>或右键以管理员权限运行 |
| 被控端有人<br/>且通过点击确认连接<br/>且连接时立即提权 | 被控端接收连接时点击`接受并提权` |
| 被控端有人<br/>且仅必要时提权 | 被控端通过连接管理窗口提权<br/>或主控端请求提权 |

Binary file not shown.

After

Width:  |  Height:  |  Size: 54 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 54 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 49 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 19 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 11 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 12 KiB