# Exec node need administrative right in windows 10

**URL:** <https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774>\
**Category:** General\
**Tags:** exec\
**Created:** [29 May 2023 07:22 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774 "2023-05-29T07:22:37Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sdrshnptl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sdrshnptl/32/40446_2.png) [@sdrshnptl](https://discourse.nodered.org/u/sdrshnptl)\
**Post date:** [29 May 2023 07:22 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774/1 "2023-05-29T07:22:37Z")

</div>

Hello All,  
I'm trying to execute command from nodered exec node.  
This specific command only need admin right.  
Any alternative to execute admin level commands from nodered?

![exec node err of amin right](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/2/4/241f55abf777be35ef78c02481a9927a265ddfa8.png)

---

<div class="post-metadata">

**Author:** ![edje11](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/edje11/32/572_2.png) [@edje11](https://discourse.nodered.org/u/edje11)\
**Post date:** [29 May 2023 11:27 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774/2 "2023-05-29T11:27:27Z")

</div>

Maybe you can share what command you try to use.  
Security settings of this command can maybe be altered so no admin right are necessary.

---

<div class="post-metadata">

**Author:** ![sdrshnptl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sdrshnptl/32/40446_2.png) [@sdrshnptl](https://discourse.nodered.org/u/sdrshnptl)\
**Post date:** [29 May 2023 11:40 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774/3 "2023-05-29T11:40:44Z")

</div>

Hi @edje11  
Command is `manage-bde -lock D: -ForceDismount`  
it's used to lock bitlocker enabled drive

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [29 May 2023 16:08 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774/4 "2023-05-29T16:08:12Z")

</div>

Any changes to bitlocker MUST require admin rights. Anything else would be a serious security flaw.

If the PC is part of a managed service (e.g. InTune) or a member of a Windows domain, you should do this via a remote command using a service or account with domain privileges.

There are also PowerShell commands for controlling bitlocker but I'm pretty sure they will also need admin privalages.

[BitLocker Module | Microsoft Learn](https://learn.microsoft.com/en-us/powershell/module/bitlocker/?view=windowsserver2022-ps)

---

<div class="post-metadata">

**Author:** ![sdrshnptl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/sdrshnptl/32/40446_2.png) [@sdrshnptl](https://discourse.nodered.org/u/sdrshnptl)\
**Post date:** [30 May 2023 06:18 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774/5 "2023-05-30T06:18:42Z")

</div>

> [@TotallyInformation](#):
>
> If the PC is part of a managed service (e.g. InTune) or a member of a Windows domain, you should do this via a remote command using a service or account with domain privileges.

This need exploration!  
Thanks @TotallyInformation

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [13 June 2023 06:19 UTC](https://discourse.nodered.org/t/exec-node-need-administrative-right-in-windows-10/78774/6 "2023-06-13T06:19:05Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.