Windows Permissions Guide

How to Let a User Run a Program as Administrator Without Entering a Password

A safe, practical guide for Windows 10 and Windows 11: allow a standard user to launch one trusted application with elevated rights without giving them the administrator password.

🪟 Windows 10 & 11 🔐 Admin rights 🛠 Task Scheduler method ⚠ Security notes included

Can a Standard User Run a Program as Administrator Without the Admin Password?

Yes, but only if an administrator configures it in advance. Windows does not provide a safe setting that says “always allow this standard user to run any administrator program without a password”. That would effectively bypass User Account Control and weaken the security model.

The correct approach is more limited: choose one trusted program, create a controlled elevated task for it, and give the user a shortcut that starts only that task.

Important security warning Do not disable UAC and do not share the administrator password. The safest solution is to allow elevation only for a specific, trusted program from a fixed location.

When this method is useful

When you should not use it

Best Way to Run a Program as Administrator Without Password: Task Scheduler

The most practical built-in method is to create a Windows Task Scheduler task that runs the required program with highest privileges. Then you create a shortcut that runs the task with schtasks /run.

Recommended method Use Task Scheduler for one specific executable. This avoids giving the user the administrator password and avoids making the account a member of the Administrators group.

This method is especially useful on a home PC, a small office computer, or a workstation where one trusted application needs elevation. In managed corporate environments, use Group Policy, Intune, application control, or your endpoint privilege management solution instead.

Step 1: Create a Scheduled Task That Runs with Administrator Rights

First, sign in with an administrator account. Then create a task that launches the program you want to allow.

  1. Press Win + R, type taskschd.msc, and press Enter.
  2. In the right panel, click Create Task. Do not use “Create Basic Task” because it has fewer options.
  3. On the General tab, enter a clear task name, for example Run_Admin_App.
  4. Select Run only when user is logged on unless the program must run in the background without a desktop session.
  5. Enable Run with highest privileges.
  6. In Configure for, select Windows 10 or Windows 11 if available.
  7. Open the Actions tab and click New.
  8. Set Action to Start a program.
  9. In Program/script, browse to the exact executable file.
  10. If the program needs a working folder, enter it in Start in. Do not put quotation marks in the “Start in” field.
  11. Click OK and enter the administrator password if Windows asks for it.
Example Program/script: C:\Program Files\ExampleApp\ExampleApp.exe
Start in: C:\Program Files\ExampleApp

Use a folder where standard users cannot replace or edit the executable. C:\Program Files is usually better than a user-writable folder such as Desktop, Downloads, or AppData.

Step 2: Create a Shortcut That Starts the Elevated Task

Now create a shortcut for the standard user. This shortcut does not run the program directly. It asks Task Scheduler to run the preconfigured elevated task.

  1. Right-click the desktop and select New → Shortcut.
  2. In the location field, enter the following command:
schtasks /run /tn "Run_Admin_App"
  1. Click Next.
  2. Name the shortcut, for example Run Example App as Administrator.
  3. Click Finish.

If you created the task inside a folder in Task Scheduler, include the folder path in the task name:

schtasks /run /tn "\MyTasks\Run_Admin_App"

Optional: make the shortcut look like the real program

  1. Right-click the shortcut and select Properties.
  2. Click Change Icon.
  3. Browse to the original program’s .exe file.
  4. Select the icon and click OK.

Step 3: Test the Admin Shortcut from the Standard User Account

Sign in as the standard user and double-click the new shortcut. If everything is configured correctly, the program should start with elevated rights without asking the user to type the administrator password.

How to confirm that the app is elevated

If the app opens but cannot access the user’s files The program may be running under the administrator account instead of the standard user account. This is normal for some scheduled task configurations. Use the app’s own settings or file permissions to control where it stores data.

PowerShell Method: Create an Elevated Scheduled Task by Command

Advanced users can create the task with PowerShell. Open PowerShell as Administrator and adjust the paths and task name below.

$TaskName = "Run_Admin_App"
$Program  = "C:\Program Files\ExampleApp\ExampleApp.exe"
$WorkDir  = "C:\Program Files\ExampleApp"

$Action = New-ScheduledTaskAction -Execute $Program -WorkingDirectory $WorkDir
$Principal = New-ScheduledTaskPrincipal -UserId "$env:USERDOMAIN\Administrator" -RunLevel Highest
$Settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -StartWhenAvailable

Register-ScheduledTask -TaskName $TaskName -Action $Action -Principal $Principal -Settings $Settings

In many cases you will still need to provide administrator credentials when creating or registering the task. That is expected: the password is entered during setup by an administrator, not every time the standard user launches the shortcut.

Shortcut command After creating the task, the user’s shortcut is still the same: schtasks /run /tn "Run_Admin_App"

Using Runas /savecred to Run as Administrator Without Password

Windows also has the runas command. Some guides suggest using /savecred so the admin password is entered once and then stored for later launches.

runas /user:ComputerName\Administrator /savecred "C:\Program Files\ExampleApp\ExampleApp.exe"

Although this may work in some scenarios, it is usually not the best option. The saved credentials may allow the user to start other programs as that administrator account, not only the intended application.

Security risk Avoid runas /savecred on shared PCs, office computers, and any system where you cannot fully trust the user. Task Scheduler is usually safer because it can be limited to one predefined action.

Other Ways to Allow a Program to Run with Admin Rights

1. Give the user permission only to the required folders or registry keys

Some programs ask for administrator rights only because they write to protected locations. If you know exactly what the app needs, you may be able to grant write permission to a specific folder, service, or registry key instead of elevating the whole program.

2. Install the program properly for all users

Reinstalling or repairing the application as administrator can sometimes fix permission problems. Modern apps should not require administrator rights for daily use after installation.

3. Use enterprise privilege management

In business environments, use endpoint privilege management, application allowlisting, Microsoft Intune, Group Policy, or similar tools. These solutions are designed for auditing and policy-based elevation.

4. Do not make the user a local administrator unless necessary

Adding the user to the Administrators group solves the password prompt but creates a much larger security problem. The user can install software, change system settings, disable protection, and run any program with elevated rights.

Fix: Scheduled Task Shortcut Does Not Run the Program

1. Check the task name

The shortcut must match the task name exactly. If the task is in a folder, include the folder path:

schtasks /run /tn "\FolderName\TaskName"

2. Use the full path to the executable

Do not rely on relative paths. Use the full path to the .exe file and set the working directory if the program needs it.

3. Check “Run with highest privileges”

Open Task Scheduler, right-click the task, select Properties, and make sure Run with highest privileges is enabled.

4. Check whether the app requires an interactive desktop

If the application has a normal window, use Run only when user is logged on. Some GUI apps do not appear correctly when configured to run whether the user is logged on or not.

5. The standard user gets “Access is denied”

The user may not have permission to start that scheduled task. Recreate the task while carefully selecting the user/account context, or place the task in a dedicated folder and check its permissions. On managed systems, policy restrictions may block non-admin users from launching administrator-created tasks.

6. The program launches but immediately closes

Check the program path, working directory, required arguments, and whether the program depends on mapped network drives. Elevated tasks may not see the same mapped drives as the standard user. Use UNC paths such as \\server\share instead.

FAQ: Running Programs as Administrator Without Password in Windows

Can I disable the UAC prompt for only one program?

Windows does not provide a simple per-app UAC disable switch for standard users. The usual workaround is to create a scheduled task that runs one trusted program with elevated privileges.

Is Task Scheduler safer than giving the user the admin password?

Yes. The user receives a shortcut to start one predefined task instead of knowing the administrator password or having full administrator rights.

Can I use this for installers?

It is not recommended. Installers can often launch other processes, modify system files, and change services. Use this method only for a trusted, stable application with a predictable executable path.

Will this work on Windows 10 Home and Windows 11 Home?

Yes, Task Scheduler is available in Home editions. However, some advanced policy and management options are available only in Pro, Enterprise, or Education editions.

What is the safest setup?

Keep the user as a standard user, install the application in C:\Program Files, make sure the user cannot replace the executable, create a scheduled task with highest privileges, and provide a shortcut that starts only that task.

Conclusion: Allow Admin Launches Without Giving Away Admin Rights

The safest built-in way to let a user run a specific Windows program as administrator without entering the password every time is to use Task Scheduler. Configure the task once as an administrator, enable highest privileges, and give the standard user a shortcut that runs the task.

Avoid disabling UAC, avoid sharing the administrator password, and be very cautious with runas /savecred. Limit elevation to one trusted executable and store it in a location that standard users cannot modify.