How to run powershell commands without admin rights? Is there any option we can use and achive this?

Question

How to run powershell commands without admin rights? Is there any option we can use and achive this?

Vinod Survase 4,776

How to run PowerShell commands without admin rights? Is there any option we can use and achieve this?

Accepted answer

2 additional answers

Your answer

Answer 1

Limitless Technology 39,926

Hello Vinod,

If your domain administrator hasn't forbidden it, you can do this:

Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope CurrentUser

If you instead want to change the execution policy for just the current PowerShell session, you can use this command:

Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope Process

However, if your domain administrator is using the "Turn on Script Execution" group policy, you will not be able to change your execution policy at all. The group policy setting makes the Set-ExecutionPolicy cmdlet ineffective.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Thanks,

Vinod Survase 4,776 Reputation points

2021-08-31T17:30:52.81+00:00
Hi @Limitless Technology , Thanks for your reply. I tried this but no luck. I am getting below error when I am trying to run MS teams PowerShell command without Run as admin on PowerShell.

Get-CsTeamsMessagingPolicy

Get-CsOnlineSession : Connecting to remote server api.interfaces.records.teams.microsoft.com failed with the following error message : The WinRM client cannot process
the request. Basic authentication is currently disabled in the client configuration. Change the client configuration and try the request again. For more information,
see the about_Remote_Troubleshooting Help topic.
At C:\Users\username\OneDrive -\Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:273 char:22

$remoteSession = & (Get-CsOnlineSessionCommand)
Vinod Survase 4,776 Reputation points

2021-08-31T17:32:11.5+00:00
Invoke-Command : Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command
again.
At C:\Users\username\OneDrive - \Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:113 char:38

-Session $session `

~~~~~~~~

CategoryInfo : InvalidData: (:) [Invoke-Command], ParentContainsErrorRecordException

FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.PowerShell.Commands.InvokeCommandCommand

Answer 2

Leon Laude 86,026

Hi @Vinod Survase ,

This may depend on your organization's policies, have a look here for a few options on how to run PowerShell commands without admin rights:
How do I run powershell scripts without admin rights?

----------

If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!

Best regards,
Leon

Vinod Survase 4,776 Reputation points

2021-08-31T17:29:29.137+00:00
Hi @Leon Laude , Thanks for your reply. I tried this but no luck. I am getting below error when I am trying to run MS teams PowerShell command without Run as admin on PowerShell.

Get-CsTeamsMessagingPolicy

Get-CsOnlineSession : Connecting to remote server api.interfaces.records.teams.microsoft.com failed with the following error message : The WinRM client cannot process
the request. Basic authentication is currently disabled in the client configuration. Change the client configuration and try the request again. For more information,
see the about_Remote_Troubleshooting Help topic.
At C:\Users\username\OneDrive -\Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:273 char:22

$remoteSession = & (Get-CsOnlineSessionCommand)
Vinod Survase 4,776 Reputation points

2021-08-31T17:29:40.597+00:00
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : NotSpecified: (:) [Get-CsOnlineSession], PSRemotingTransportException

FullyQualifiedErrorId : PSRemotingTransportException,Microsoft.Teams.ConfigApi.Cmdlets.GetCsOnlineSession

Invoke-Command : Cannot validate argument on parameter 'Session'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command
again.
At C:\Users\username\OneDrive - \Documents\WindowsPowerShell\Modules\MicrosoftTeams\2.5.1\net472\SfBORemotePowershellModule.psm1:113 char:38

-Session $session `

~~~~~~~~

CategoryInfo : InvalidData: (:) [Invoke-Command], ParentContainsErrorRecordException

FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.PowerShell.Commands.InvokeCommandCommand
Rich Matheisen 47,901 Reputation points

2021-08-31T18:27:20.117+00:00

It isn't that you don't have admin rights. The error is that you're trying to use BASIC authentication:

Basic authentication is currently disabled in the client configuration. Change the client configuration and try the request again. For more information,

see the about_Remote_Troubleshooting Help topic.
Vinod Survase 4,776 Reputation points

2021-09-01T05:42:43.71+00:00
Hi @Rich Matheisen , Thanks for reply. I did try but it gives me an error
see below

Get-Help about_Remote_Troubleshooting
Get-Help : Get-Help could not find about_Remote_Troubleshooting in a help file in this session. To download updated help topics type: "Update-Help". To get help online,
search for the help topic in the TechNet library at https:/go.microsoft.com/fwlink/?LinkID=107116.
At line:1 char:1

Get-Help about_Remote_Troubleshooting

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : ResourceUnavailable: (:) [Get-Help], HelpNotFoundException

FullyQualifiedErrorId : HelpNotFound,Microsoft.PowerShell.Commands.GetHelpCommand
Leon Laude 86,026 Reputation points

2021-09-01T06:01:47.83+00:00

The Basic Authentication is disabled so that is why you are receiving this error, you will need to enable it:
winrm set winrm/config/client/auth @{Basic="true"}

Here's also a blog post discussing this issue:
https://drjohnstechtalk.com/blog/2016/09/powershell-winrm-client-error-explained/
Vinod Survase 4,776 Reputation points

2021-09-01T06:51:22.49+00:00
Hi @Leon Laude , I tried that command on PowerShell but no luck, it gives an below error

winrm set winrm/config/client/auth @{Basic="true"}
winrm : Error: Invalid use of command line. Type "winrm -?" for help.
At line:1 char:1

winrm set winrm/config/client/auth @{Basic="true"}

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CategoryInfo : NotSpecified: (Error: Invalid ...m -?" for help.:String) [], RemoteException

FullyQualifiedErrorId : NativeCommandError
Leon Laude 86,026 Reputation points

2021-09-01T06:53:23.327+00:00

You'll need to use an elevated (admin) Command Prompt to run the winrm command.
Vinod Survase 4,776 Reputation points

2021-09-01T06:54:48.203+00:00

Hi @Leon Laude , you mean Run as administrator ?
Leon Laude 86,026 Reputation points

2021-09-01T07:01:41.03+00:00

Yes run the Command Prompt as Administrator, then run the winrm command.
JimmyYang-MSFT 58,641 Reputation points Microsoft External Staff

2021-09-01T09:56:10.657+00:00

@Vinod Survase

Could you check the above suggestion to see if works for you?
Vinod Survase 4,776 Reputation points

2021-09-01T10:02:11.977+00:00

Hi @JimmyYang-MSFT & @Leon Laude , When I open PowerShell as Run as administrator it shows below popup and after entering password it does not accept credentials.
Vinod Survase 4,776 Reputation points

2021-09-01T10:03:03.767+00:00

Do I require local admin password or domain admin password for this?
Leon Laude 86,026 Reputation points

2021-09-01T10:04:27.763+00:00

If your computer is domain-joined, ask an administrator to do this for you, if you are a local administrator on the computer you can try using the local admin credentials.
Vinod Survase 4,776 Reputation points

2021-09-01T10:14:33.907+00:00

ok @Leon Laude , Thanks for your reply. I need to check with domain admin that case as my system is domain joined machine.

Answer 3

Limitless Technology 39,926

Hello Vinod,

Unfortunately it seems that the issue here is not with Script execution but also with the Basic Authentication settings on your tenant. Basic Authentication seems to be disabled from what is written in the output.

Not an expert in O365 or scripting to cloud services but I would suggest to check the tenant policies about Basic Authentication, and check by enabling 1 by 1 which is the one that is blocking the execution.

https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/disable-basic-authentication-in-exchange-online
In the part: Authentication policy procedures in Exchange Online

Hope that helps.

Vinod Survase 4,776 Reputation points

2021-09-02T11:34:35.757+00:00

Thanks @Limitless Technology , As per my knowledge we don't have any policies on tenant like basic authentication but I need to check if we have any.

Share via

How to run powershell commands without admin rights? Is there any option we can use and achive this?

2 additional answers

Your answer