is PID running ELEVATED [solved]

[argumentum]

I need to know if a program is running Elevated. If it is then I'd have to run mine too in elevated mode (#ReqAdmin), else, just a user level ( not elevated ).
my dream would be of _WinAPI_IsElevated ( $iPID ) but there is no such animal and in any case it uses "TokenInformation", and I'd like to know as a User, not an Admin.
Anyway to query what Task manager shows in windows 10 ?

Thanks

Edited February 3, 2017 by argumentum

[careca]

Where do you see that information in task manager?

[argumentum]

1 minute ago, careca said:

Where do you see that information in task manager?

one can select the columns by a context menu on the header

[Subz]

You could use Wmi and check for the ExecutablePath using the example below if $avProcProps[$x][1] = "" then its running elevated otherwise it's non-elevated.  Of course this won't work if your script is running elevated, i.e. if you have #RequireAdmin at the top of the script below.

expandcollapse popup

#include <array.au3>; Only for _ArrayDisplay()

$avProcProps = _ProcessListProperties('Chrome.exe')
_ArrayDisplay($avProcProps, "$avProcProps")

;===============================================================================
; Function Name:    _ProcessListProperties()
; Description:   Get various properties of a process, or all processes
; Call With:       _ProcessListProperties( [$Process [, $sComputer]] )
; Parameter(s):     (optional) $Process - PID or name of a process, default is all
;           (optional) $sComputer - remote computer to get list from, default is local
; Requirement(s):   AutoIt v3.2.4.9+
; Return Value(s):  On Success - Returns a 2D array of processes, as in ProcessList()
;             with additional columns added:
;             [0][0] - Number of processes listed (can be 0 if no matches found)
;             [1][0] - 1st process name
;             [1][1] - 1st process executable path
;             ...
;             [n][0] thru [n][8] - last process properties
; On Failure:       Returns array with [0][0] = 0 and sets @Error to non-zero (see code below)
; Author(s):        PsaltyDS at http://www.autoitscript.com/forum
; Date/Version:   05/05/2008  --  v1.0.0
; Notes:            If a numeric PID or string process name is provided and no match is found,
;             then [0][0] = 0 and @error = 0 (not treated as an error, same as ProcessList)
;           This function requires admin permissions to the target computer.
;           All properties come from the Win32_Process class in WMI.
;===============================================================================
Func _ProcessListProperties($Process = "", $sComputer = ".")
    Local $sUserName, $sMsg, $sUserDomain, $avProcs
    If $Process = "" Then
        $avProcs = ProcessList()
    Else
        $avProcs = ProcessList($Process)
    EndIf

   ; Return for no matches
    If $avProcs[0][0] = 0 Then Return $avProcs

   ; ReDim array for additional property columns
    ReDim $avProcs[$avProcs[0][0] + 1][2]

   ; Connect to WMI and get process objects
    $oWMI = ObjGet("winmgmts:{impersonationLevel=impersonate}!\\" & $sComputer & "\root\cimv2")
    If IsObj($oWMI) Then
       ; Get collection of all processes from Win32_Process
        $colProcs = $oWMI.ExecQuery("select * from win32_process")
        If IsObj($colProcs) Then
           ; For each process...
            For $oProc In $colProcs
                $sObjName = ObjName($oProc, 1)
                If @error Then ContinueLoop; Skip if process no longer exists
               ; Find it in the array
                For $n = 1 To $avProcs[0][0]
                    If $avProcs[$n][1] = $oProc.ProcessId Then $avProcs[$n][1] = $oProc.ExecutablePath
                Next
            Next
        Else
            SetError(2); Error getting process collection from WMI
        EndIf
    Else
        SetError(1); Error connecting to WMI
    EndIf

   ; Return array
    Return $avProcs
EndFunc  ;==>_ProcessListProperties

 

[argumentum]

2 hours ago, Subz said:

$avProcProps[$x][1] = "" then its running elevated

I did not know that. But I figure there must be a DLL call for that.
For now yours is the better ( and only ) answer, thanks.

[argumentum]

in https://www.autoitscript.com/forum/topic/122050-useful-snippets-collection-thread/ at point 8. Facts on UAC  is the reason for this question of mine. How to run my script so it'd interact with an app. that runs elevated on the Admin acct. and, as regular/standard/limited user, and add the UAC bypass accordingly, to have it start up without issues. To do so I need to compile as  #AutoIt3Wrapper_Res_requestedExecutionLevel=highestAvailable  and  on the Task Scheduler with highestAvailable for the Admin acct.

So now my next question is "how do I know if the user is limited or not".

Edit: 

If _IsAdministrator() Then
        $s &= '<RunLevel>HighestAvailable</RunLevel>' & @CRLF
    Else
        $s &=  '<RunLevel>LeastPrivilege</RunLevel>' & @CRLF
    EndIf

and the code is from trancexx ( https://www.autoitscript.com/forum/topic/113611-if-isadmin-not-detected-as-admin/?do=findComment&comment=795036 ).

So I guess I did not need the _WinAPI_IsElevated ( $iPID )  that I thought i needed.
 

Edited February 3, 2017 by argumentum
kept thinking