How can I list all processes running with elevated permissions in Windows 7 or above?

I would like to be able to list all processes running with elevated permissions (i.e. as administrator) on Windows 7 system. How can I do it?


You can do this from the Task Manager, as described on this article. To summarize, you have to add a new column to the view : UAC Virtualization. From the value of this field, you are able to determine whether the process is running elevated or not.

If you want to do this remotely, or via a script, I suggest you to have a look at PowerShell. Particularilly this cmdlet (and its methods) :

Get-WMIObject win32_process

Hope this helps !