Command line filters

All of the commands under this folder are built-in and are used by the ACS Policy Wizard when it creates an elevation policy for certain system options. These filters are all partial matches that will elevate an application if that command is present.

For example:

  • The Defragment Component (dfrg.msc) filter is used to elevate the disk defragmenter. When standard users click on the Performance Monitor to launch the application, the actual commandline that is executed is "C:\Windows\System32\mmc.exe 'C:\Windows\Sysetm32\perfmon.msc'", thus by using the partial match commandline filter of "perfmon.msc", then when MMC.exe gets executed with perfmon.msc also in the command line, then Arellia will elevate that application.
  • This is how all of the commandline filters work, rather than elevating all of the many different functions that use the same application (for example perfmon and disk defrag both use mmc), Arellia limits the scope using commandline filters.

    Limit scope of things to elevate

    Custom commandlines can also be created according to a customer's own needs and wants and are used most often to limit the scope of what they want elevated.