自提升脚本+执行策略

Question

我正在尝试使用问题 "PowerShell: Running a command as Administrator" 中的以下代码，不仅可以在管理员级别的 PowerShell 中将我的脚本自动提升到运行，而且还可以用于管理员级别PowerShell 会话运行的 ExecutionPolicy 级别为 RemoteSigned。我假设我需要在 $newProcess.Arguments 中使用类似 -ExecutionPolicy RemoteSigned 的东西，但我完全不知道是否是这种情况，如果是的话，那么我使用什么语法来创建多个参数？

# Get the ID and security principal of the current user account
$myWindowsID = [System.Security.Principal.WindowsIdentity]::GetCurrent();
$myWindowsPrincipal = New-Object System.Security.Principal.WindowsPrincipal($myWindowsID);

# Get the security principal for the administrator role
$adminRole = [System.Security.Principal.WindowsBuiltInRole]::Administrator;

# Check to see if we are currently running as an administrator
if ($myWindowsPrincipal.IsInRole($adminRole)) {
    # We are running as an administrator, so change the title and background colour to indicate this
    $Host.UI.RawUI.WindowTitle = $myInvocation.MyCommand.Definition + "(Elevated)";
    $Host.UI.RawUI.BackgroundColor = "DarkBlue";
    Clear-Host;
} else {
    # We are not running as an administrator, so relaunch as administrator

    # Create a new process object that starts PowerShell
    $newProcess = New-Object System.Diagnostics.ProcessStartInfo "PowerShell";

    # Specify the current script path and name as a parameter with added scope and support for scripts with spaces in it's path
    $newProcess.Arguments = "& '" + $script:MyInvocation.MyCommand.Path + "'"

    # Indicate that the process should be elevated
    $newProcess.Verb = "runas";

    # Start the new process
    [System.Diagnostics.Process]::Start($newProcess);

    # Exit from the current, unelevated, process
    Exit;
}

# Run your code that needs to be elevated here...

Write-Host -NoNewLine "Press any key to continue...";
$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown");

Answer 1

$newProcess.Arguments 确实是你添加相关参数的地方。但是，您可能希望通过参数 -File 运行脚本，而不是在隐式 -Command 参数中使用调用运算符 (&)。

$newProcess = New-Object Diagnostics.ProcessStartInfo 'powershell.exe'
$newProcess.Arguments = '-ExecutionPolicy RemoteSigned -File "' +
                        $script:MyInvocation.MyCommand.Path + '"'
$newProcess.Verb = 'runas'
[Diagnostics.Process]::Start($newProcess)

自提升脚本+执行策略

Self Elevating Script + Execution Policy

powershell

administrator

executionpolicy