DefaultAccount权限 [英] DefaultAccount Permissions
问题描述
我正在运行RP 3 10.0.14393.693。 当我尝试从命令行界面运行命令时，我收到"访问被拒绝"错误。错误消息指出"您的设备不允许运行命令行处理器"。
I am running a RP 3 10.0.14393.693. When I try to run a command from the Command Line screen I get an "Access is denied" error. The error message states that "Your device is not allowed to run the command line processor".
它建议添加以下值：
reg添加HKLM \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \EmbeddeMode \ ProcessLauncher / v AllowedExecutableFileList / t REG_MULTI_SZ /dc:\windows\system32\cmd.exe\0
reg ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\EmbeddeMode\ProcessLauncher /v AllowedExecutableFileList /t REG_MULTI_SZ /d c:\windows\system32\cmd.exe\0
但是当我使用PS执行此操作时，PS会话冻结，最终RP崩溃（请参阅单独的帖子）。
However when I do this using PS, the PS session freezes, and eventually the RP crashes (see separate post).
命令行界面显示它在DefaultAccount下运行。
The Command Line screen states it is running under the DefaultAccount.
我正在尝试了解有关DefaultAccount权限等的更多信息。我发现网上很少。
I am trying to find out more about DefaultAccount permissions etc. I have found very little online.
使用Device Portal>进程我可以看到一些进程在本地管理员帐户下运行，一些进程在DefaultAccount下运行，包括IoTShell.exe。
Using Device Portal>Processes I can see that some processes are running under the local administrator account and some are running under the DefaultAccount including IoTShell.exe.
大概有一个选项是在管理员帐户下运行shell吗？
Presumably one option would be to run the shell under the administrator account?
注意：如果我运行
reg query HKLM \ SOFTWARE \ Mycoftoft \ Windows \ CurrentVersion \EmbeddeMode \ ProcessLauncher
reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\EmbeddeMode\ProcessLauncher
我得
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\EmbeddeMode\ProcessLauncher
  AllowedExecutableFileList REG_MULTI_SZ c：\windows \ system32 \ cmd.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\EmbeddeMode\ProcessLauncher
AllowedExecutableFileList REG_MULTI_SZ c:\windows\system32\cmd.exe
暗示cmd.exe应该能够运行，因此添加此值的错误消息建议是多余的（和崩溃RP）。
implying that cmd.exe should be able to run and therefore the error message suggestion to add this value is redundant (and crashes the RP).
推荐答案
我在使用reg.exe时遇到问题添加一个值（在我的情况下添加而不是编辑）。
I am also having problems using reg.exe to add a value (in my case add rather then edit).
在我的方案中，当我尝试在运行10.0.14393.693的RP 3上使用命令行时，我收到"拒绝访问"错误。
In my scenario I am getting an Access Is Denied error when I try to use the command line on a RP 3 running 10.0.14393.693.
错误消息告诉您运行
The error message tells you to run
reg ADD HKLM \ SOFTWARE \ Microoft \ Windows \ CurrentVersion \ EmbeddeMode \ ProcessLauncher / v AllowedExecutableFileList / t REG_MULTI_SZ / dc来自powershell的：\ windows \ system32 \ cmd.exe \ 0
reg ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\EmbeddeMode\ProcessLauncher /v AllowedExecutableFileList /t REG_MULTI_SZ /d c:\windows\system32\cmd.exe\0
。
当我运行此命令时，PS冻结然后连接迷路了。 如果您重新连接，则会出现内存不足异常...
When I run this, PS freezes then the connection is lost. If you reconnect, you get an out of memory exception...
我注意到如果我重新开始并再次运行命令，然后转到设备门户>性能页面，我可以看到内存使用量不断增加。
I noticed that if I start over and run the command again, and go the Device Portal>Performance page, I can see that memory use just keeps ramping up.
所以看起来运行reg时出现了问题。
So it looks like something is broken when running reg.
这篇关于DefaultAccount权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
