Microsoft explains why Sudo for Microsoft Windows 11 is different from the existing runas

Sudo is on the market in Microsoft Windows 11 Build 26052 or latester. It is a method to run instructions or packages with elevated permissions with out manually opening one other instance of Command Prompt or PowerShell. But Microsoft clarifies that it isn’t the identical as using the runas command in Microsoft Windows.

In a assist doc first noticed by Microsoft Windows Latest, Microsoft enunciated the distinction between Sudo and runas. As per the doc, Runas permits you to run instructions or packages as any consumer (even administrator) in Microsoft Windows. Meanwhile, Sudo can not run instructions or packages like every other consumer.

However, Microsoft hinted at the potential of working instructions as one other consumer with Sudo sooner or later. You might must enter a password whereas using the runas command. But whereas using Sudo, you solely want to just accept the UAC immediate and grant administrative permissions.

As you’ll be able to see within the above diagram, Microsoft has defined how Sudo interacts with the OS if you sort a command in your terminal course of.For instance, if you attempt to run netstat -ab using sudo (e.g., sudo netstat -ab), the terminal sends your command to the CLI shell (like PowerShell or Command Prompt).

The shell then communicates with the console driver (ConDrv) to deal with the enter/output.

The sudo.exe program is invoked, establishing an RPC connection to run the netstat -ab command. For these unaware, RPC stands for Remote Procedure Call, which is used for communication between processes on the identical machine.

Sudo.exe with elevated privileges executes netstat -ab, which permits it to carry out its job with administrative rights. In the Inline or Inputdisabled configurations, the unelevated Sudo.exe course of creates an RPC reference to the latest Sudo.exe course of with elevated permissions.

Sounds enjoyable, proper? However, it’s best to know the safety issues whereas using Sudo with Inline or Inputdisabled configurations. Microsoft recommends using the latest window configuration in Sudo as a result of it’s the most safe of the three choices.

Here’s how one can change Sudo’s configuration:

1. Visit the For Developers part within the Settings app.
2. Click on the Configure how sudo runs utility choice.
3. Select the In a latest window choice from the dropdown listing.

Sudo is unique to shopper editions

Microsoft formally confirmed Sudo is coming first to Microsoft Windows 11 with Build 26052 within the Canary and Dev channels. Sudo was additionally included within the Microsoft Windows Server Insider construct, however Microsoft rectified its weblog put up to disclose that Sudo will probably be unique to the patron editions.

So, solely Microsoft Windows 11 Home, Pro, Enterprise, and Edu variations will get the characteristic. Additionally, Microsoft clarified that Sudo for Microsoft Windows is open-source and will probably be maintained on GitHub.