I had reinstalled my machine this week and decided to use a more secure approach when it comes to users. So I made an admin account, used that to enable the built-in Admin account, and used THAT account to make my own account a standard user. (this way, the built in admin account can be used instead of having an active and one disabled admin account.)
Then I tweaked the folders and drives to only allow certain access to Admin and I am certain that my system is way more secure than it was before.
HOWEVER, now I cannot change important system settings easily. Sure, I could create a shortcut to every program I use and right click 'run as administrator' all the time, or I could configure the program to always run as admin, but that is also not always necessary or convenient. Most apps these days will ask to be elevated when needed but not all apps do this and thus I looked for a way to do something sudo does, and apparantly, there is a feature in windows that does just this.
Similar to linux, where you would use sudo COMMAND and then enter the password of the root user, in windows you can use runas /user:administrator COMMAND where you enter the password and it will execute the command/program with elevated user rights. Of course, you can change administrator to whatever username your admin account has.
Naturally, you could also use this method to Revoke permissions. If you are admin, but don't want to run an app as such since it may be risky, simple runas /user:standard COMMAND and it will have less privileges.
