Run powershell script as Administrator at startup (Windows10)

UULU
2 min readOct 27, 2020
  • Run with Task Scheduler open highest privileges
  • *.ps1 can't run directly, need extra command file *.cmd

Case

  • My files locate in C:\Users\jiang\Documents
  • My script is used to export WSL2 ports to LAN.

Create powershell script

wsl2-export-ports.ps1

$remoteport = bash.exe -c "ifconfig eth0 | grep 'inet '"
$found = $remoteport -match '\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}';
if( $found ){
$remoteport = $matches[0];
} else{
echo "The Script Exited, the ip address of WSL 2 cannot be found";
exit;
}
#[Ports]#All the ports you want to forward separated by coma
$ports=@(7101,8101,8301);
#[Static ip]
#You can change the addr to your ip config to listen to a specific address
$addr='0.0.0.0';
$ports_a = $ports -join ",";
#Remove Firewall Exception Rules
iex "Remove-NetFireWallRule -DisplayName 'WSL 2 Firewall Unlock' ";
#adding Exception Rules for inbound and outbound Rules
iex "New-NetFireWallRule -DisplayName 'WSL 2 Firewall Unlock' -Direction Outbound -LocalPort $ports_a -Action Allow -Protocol TCP";
iex "New-NetFireWallRule -DisplayName 'WSL 2 Firewall Unlock' -Direction Inbound -LocalPort $ports_a -Action Allow -Protocol TCP";
for( $i = 0; $i -lt $ports.length; $i++ ){
$port = $ports[$i];
iex "netsh interface portproxy delete v4tov4 listenport=$port listenaddress=$addr";
iex "netsh interface portproxy add v4tov4 listenport=$port listenaddress=$addr connectport=$port connectaddress=$remoteport";
}
echo "Success!";

Create command file to running ps1

wsl2-export-ports.cmd

PowerShell -Command "Set-ExecutionPolicy Unrestricted" >> "C:\Users\jiang\Documents\wsl2-export-ports.txt" 2>&1
PowerShell C:\Users\jiang\Documents\wsl2-export-ports.ps1 >> "C:\Users\jiang\Documents\wsl2-export-ports.txt" 2>&1

Add task in Task Scheduler

Create Basic Task

Task Scheduler -> Create Basic Task…

  • Name: Wsl2ExportPorts
  • When: When I log on
  • Action: Start a program
  • Program/script: C:\Users\jiang\Documents\wsl2-export-ports.cmd

With the administrator privileges

  • Find Wsl2ExportPorts in Task Scheduler Library
  • Check Run with highest privileges on Tab General of Wsl2ExportPorts dialog
  • Click OK
  • Right Click -> Run
  • You can see the log in wsl2-export-ports.txt.

Restart computer

Test if it works after next restart computer.

--

--