How to run powershell commands without admin rights? Is there any option we can use and achive this?

Vinod Survase 4,726

How to run PowerShell commands without admin rights? Is there any option we can use and achieve this?

Accepted answer

Limitless Technology 39,511 Reputation points

2021-08-31T14:43:28.827+00:00

Hello Vinod,

If your domain administrator hasn't forbidden it, you can do this:

Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope CurrentUser

If you instead want to change the execution policy for just the current PowerShell session, you can use this command:

Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope Process

However, if your domain administrator is using the "Turn on Script Execution" group policy, you will not be able to change your execution policy at all. The group policy setting makes the Set-ExecutionPolicy cmdlet ineffective.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Thanks,
Please sign in to rate this answer.

4 people found this answer helpful.
Vinod Survase 4,726 Reputation points

2021-08-31T17:30:52.81+00:00

Hi @Limitless Technology , Thanks for your reply. I tried this but no luck. I am getting below error when I am trying to run MS teams PowerShell command without Run as admin on PowerShell.

Get-CsTeamsMessagingPolicy

Get-CsOnlineSession : Connecting to remote server api.interfaces.records.teams.microsoft.com failed with the following error message : The WinRM client cannot process
the request. Basic authentication is currently disabled in the client configuration. Change the client configuration and try the request again. For more information,
see the about_Remote_Troubleshooting Help topic.
At C:\Users\username\OneDrive -\Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:273 char:22

$remoteSession = & (Get-CsOnlineSessionCommand)

Vinod Survase 4,726 Reputation points

2021-08-31T17:32:11.5+00:00

Invoke-Command : Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command
again.
At C:\Users\username\OneDrive - \Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:113 char:38

-Session $session `

~~~~~~~~

CategoryInfo : InvalidData: (:) [Invoke-Command], ParentContainsErrorRecordException

FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.PowerShell.Commands.InvokeCommandCommand
Sign in to comment

2 additional answers

Leon Laude 85,726 Reputation points

2021-08-31T13:11:51.837+00:00

Hi @Vinod Survase ,

This may depend on your organization's policies, have a look here for a few options on how to run PowerShell commands without admin rights:
How do I run powershell scripts without admin rights?

----------

If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!

Best regards,
Leon
Please sign in to rate this answer.

1 person found this answer helpful.
Vinod Survase 4,726 Reputation points

2021-08-31T17:29:29.137+00:00

Hi @Leon Laude , Thanks for your reply. I tried this but no luck. I am getting below error when I am trying to run MS teams PowerShell command without Run as admin on PowerShell.

Get-CsTeamsMessagingPolicy

Get-CsOnlineSession : Connecting to remote server api.interfaces.records.teams.microsoft.com failed with the following error message : The WinRM client cannot process
the request. Basic authentication is currently disabled in the client configuration. Change the client configuration and try the request again. For more information,
see the about_Remote_Troubleshooting Help topic.
At C:\Users\username\OneDrive -\Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:273 char:22

$remoteSession = & (Get-CsOnlineSessionCommand)

Vinod Survase 4,726 Reputation points

2021-08-31T17:29:40.597+00:00

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : NotSpecified: (:) [Get-CsOnlineSession], PSRemotingTransportException

FullyQualifiedErrorId : PSRemotingTransportException,Microsoft.Teams.ConfigApi.Cmdlets.GetCsOnlineSession

Invoke-Command : Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command
again.
At C:\Users\username\OneDrive - \Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:113 char:38

-Session $session `

~~~~~~~~

CategoryInfo : InvalidData: (:) [Invoke-Command], ParentContainsErrorRecordException

FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.PowerShell.Commands.InvokeCommandCommand

Rich Matheisen 45,831 Reputation points

2021-08-31T18:27:20.117+00:00

It isn't that you don't have admin rights. The error is that you're trying to use BASIC authentication:

Basic authentication is currently disabled in the client configuration. Change the client configuration and try the request again. For more information,

see the about_Remote_Troubleshooting Help topic.

Vinod Survase 4,726 Reputation points

2021-09-01T05:42:43.71+00:00

Hi @Rich Matheisen , Thanks for reply. I did try but it gives me an error
see below

Get-Help about_Remote_Troubleshooting
Get-Help : Get-Help could not find about_Remote_Troubleshooting in a help file in this session. To download updated help topics type: "Update-Help". To get help online,
search for the help topic in the TechNet library at https:/go.microsoft.com/fwlink/?LinkID=107116.
At line:1 char:1

Get-Help about_Remote_Troubleshooting

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : ResourceUnavailable: (:) [Get-Help], HelpNotFoundException

FullyQualifiedErrorId : HelpNotFound,Microsoft.PowerShell.Commands.GetHelpCommand

Leon Laude 85,726 Reputation points

2021-09-01T06:01:47.83+00:00

The Basic Authentication is disabled so that is why you are receiving this error, you will need to enable it:
winrm set winrm/config/client/auth @{Basic="true"}

Here's also a blog post discussing this issue:
https://drjohnstechtalk.com/blog/2016/09/powershell-winrm-client-error-explained/

Vinod Survase 4,726 Reputation points

2021-09-01T06:51:22.49+00:00

Hi @Leon Laude , I tried that command on PowerShell but no luck, it gives an below error

winrm set winrm/config/client/auth @{Basic="true"}
winrm : Error: Invalid use of command line. Type "winrm -?" for help.
At line:1 char:1

winrm set winrm/config/client/auth @{Basic="true"}

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : NotSpecified: (Error: Invalid ...m -?" for help.:String) [], RemoteException

FullyQualifiedErrorId : NativeCommandError

Leon Laude 85,726 Reputation points

2021-09-01T06:53:23.327+00:00

You'll need to use an elevated (admin) Command Prompt to run the winrm command.

Vinod Survase 4,726 Reputation points

2021-09-01T06:54:48.203+00:00

Hi @Leon Laude , you mean Run as administrator ?

Leon Laude 85,726 Reputation points

2021-09-01T07:01:41.03+00:00

Yes run the Command Prompt as Administrator, then run the winrm command.

JimmyYang-MSFT 50,446 Reputation points Microsoft Vendor

2021-09-01T09:56:10.657+00:00

@Vinod Survase

Could you check the above suggestion to see if works for you?

Vinod Survase 4,726 Reputation points

2021-09-01T10:02:11.977+00:00

Hi @JimmyYang-MSFT & @Leon Laude , When I open PowerShell as Run as administrator it shows below popup and after entering password it does not accept credentials.

Vinod Survase 4,726 Reputation points

2021-09-01T10:03:03.767+00:00

Do I require local admin password or domain admin password for this?

Leon Laude 85,726 Reputation points

2021-09-01T10:04:27.763+00:00

If your computer is domain-joined, ask an administrator to do this for you, if you are a local administrator on the computer you can try using the local admin credentials.

Vinod Survase 4,726 Reputation points

2021-09-01T10:14:33.907+00:00

ok @Leon Laude , Thanks for your reply. I need to check with domain admin that case as my system is domain joined machine.
Sign in to comment
Limitless Technology 39,511 Reputation points

2021-09-02T08:25:38.727+00:00

Hello Vinod,

Unfortunately it seems that the issue here is not with Script execution but also with the Basic Authentication settings on your tenant. Basic Authentication seems to be disabled from what is written in the output.

Not an expert in O365 or scripting to cloud services but I would suggest to check the tenant policies about Basic Authentication, and check by enabling 1 by 1 which is the one that is blocking the execution.

https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/disable-basic-authentication-in-exchange-online
In the part: Authentication policy procedures in Exchange Online

Hope that helps.
Please sign in to rate this answer.
Vinod Survase 4,726 Reputation points

2021-09-02T11:34:35.757+00:00

Thanks @Limitless Technology , As per my knowledge we don't have any policies on tenant like basic authentication but I need to check if we have any.
Sign in to comment

Share via

How to run powershell commands without admin rights? Is there any option we can use and achive this?

2 additional answers