RunAs / Windows 7 UAC Bypass : SCCM 2007 R2 Push

[mlubbers]

I have created many scripts for the hospital I work for and since my normal coding partner has cancer, he no longer is working beside me so, I need to understand how to use the network SCCM account in a RunAs or RunAsWait command that will completely bypass the UAC when launched either directly from the .exe or from the SCCM Push. thank you so much and I really appreciate it! If you need samples of what I have done, please comment!

[MadaraUchiha]

A sample would be cool.

The only way I knew (besides EnableULA) is to patch  RtlQueryElevationFlags in windows explorer --> UAC Level nothing --> No popup.

But your code would really interesst me.

[mlubbers]

#cs ----------------------------------------------------------------------------

 AutoIt Version: 3.3.8.1
 Author:         Matt Lubbers
 Company: Phelps County Regional Medical Center

#ce ----------------------------------------------------------------------------

ShellExecuteWait( "dotNetFx40_Full_x86_x64.exe" , " /norestart /q " , "UNC" )

ShellExecuteWait( "ImageNow Client 6.7.0.exe" , " /S /v/qn " , "UNC" )

Then I push with SCCM the SCCM-Installer.exe below.

#cs ----------------------------------------------------------------------------

 AutoIt Version: 3.3.8.1
 Author:         Matt Lubbers
 Company: Phelps County Regional Medical Center
 Ext: 8910


#ce ----------------------------------------------------------------------------

RunAsWait( "username" , @LogonDomain , "password" , 0 , "Installer.exe" , @ScriptDir )

[scubar]

In SCCM in the package when you create the program you can set it to run as administrator. You do not need to specify credentials in your script to install anything. The program will get called under the SYSTEM account.