How can I list all processes running with elevated permissions in Windows 7 or above?
I would like to be able to list all processes running with elevated permissions (i.e. as administrator) on Windows 7 system. How can I do it?
You can do this from the Task Manager, as described on this article. To summarize, you have to add a new column to the view : UAC Virtualization. From the value of this field, you are able to determine whether the process is running elevated or not.
If you want to do this remotely, or via a script, I suggest you to have a look at PowerShell. Particularilly this cmdlet (and its methods) :
Get-WMIObject win32_process
Hope this helps !