{"id":9241,"date":"2024-03-01T17:06:27","date_gmt":"2024-03-01T17:06:27","guid":{"rendered":"https:\/\/cheapwindowsvps.com\/blog\/comparing-sudo-for-windows-vs-runas-and-sudo-for-linux\/"},"modified":"2025-01-16T11:16:15","modified_gmt":"2025-01-16T11:16:15","slug":"comparing-sudo-for-windows-vs-runas-and-sudo-for-linux","status":"publish","type":"post","link":"https:\/\/cheapwindowsvps.com\/blog\/comparing-sudo-for-windows-vs-runas-and-sudo-for-linux\/","title":{"rendered":"Comparing Sudo for Windows vs. Runas and Sudo for Linux"},"content":{"rendered":"

Sudo for Windows has been available since Build 26052<\/a> and is currently only accessible through the Windows Insiders program as part of preview builds for Windows 11. At this time, it appears that sudo will not come to Windows Server 2025<\/a>. In this article, I explain how to use sudo in Windows 11 and compare Sudo for Windows with Runas, Gsudo, and Sudo for Linux.<\/div>\n<\/p>\n

Sudo, short for “Superuser do,” is a privilege elevation utility popular on Linux systems. It makes it easy for administrators and developers to quickly switch between admin and non-admin tasks. It can also be used to run commands as another user. Sudo for Windows is Microsoft’s sudo implementation.<\/p>\n<\/p>\n

Sudo allows you to prepend sudo to a command to run that command with administrative privileges. You return to a non-privileged prompt after the privileged command returns. This allows you to switch between privilege levels easily.<\/p>\n<\/p>\n

Alternatives to Sudo for Windows<\/h2>\n<\/p>\n

There are three main alternatives for executing commands with administrator privileges:<\/p>\n<\/p>\n

    \n
  1. Running the shell as Administrator<\/strong>. They can run all admin-level commands within it. However, the downside is the necessity to manage the overhead of switching between different shells to carry out both admin and non-admin tasks.<\/li>\n
  2. Utilizing Runas<\/strong>. Runas is a command-line utility in Windows that enables a user to operate specific programs within the target user’s permissions and environment. However, Runas always demands a password, whereas Sudo can be set up to run without a password for the specific user executing the Sudo command. Sudo can also be tailored to run all commands in a single window, unlike Runas, which initiates a new window for privileged commands. <\/li>\n
  3. Use of Gsudo<\/strong>. Gsudo is an external application that imparts Linux\u2019s sudo functionality to Windows. They can execute their commands in a non-privileged shell and utilize gsudo when required to run admin-level commands. The only downside of this approach is that gsudo is a third-party application, and despite being recommended by Microsoft, there are no guarantees or assurances of compatibility with future Windows versions or ongoing support.<\/li>\n<\/ol>\n

    Enabling Sudo for Windows<\/h2>\n<\/p>\n

    If they wish to enable sudo for windows, they can register as an insider<\/a> and then update their system<\/a> to at least Windows 11, build 26052.<\/p>\n<\/p>\n

    To activate Sudo for Windows, navigate to Settings -> System -> For developers<\/em>.<\/p>\n

    Toggle Enable Sudo On<\/strong>. Sudo for Windows offers three configurations: In a new window<\/strong>, Inline<\/strong>, and With input disabled<\/strong>.<\/p>\n

    <\/a> <\/p>\n

    How to use Sudo for Windows<\/h2>\n<\/p>\n

    To see Sudo in action on Windows, open up a terminal. Three configurations are available: forceNewWindow<\/em>, disableInput,<\/em> and normal<\/em>. In the Settings app, they correspond to In a new window<\/em>, With input disabled<\/em> and Inline<\/em>, respectively.<\/p>\n<\/p>\n

    ForceNewWindow mode<\/h3>\n<\/p>\n

    Every command run with sudo is executed in an elevated new window in this mode. You can check the currently active mode in the terminal with the sudo config<\/em> command.<\/p>\n<\/p>\n

    sudo config<\/p>
    <\/pre>\n<\/p>\n
    <\/a><\/p>\n
    Executing a command with sudo in a new window<\/p>\n<\/div>\n
    For example, running the netstat command with sudo opens a new window. Netstat, as shown below, lists all connections (a) with the processes that created them (b).<\/p>\n
    sudo netstat -ab<\/p>
    <\/pre>\n
    Before the elevated window opens, you must consent by selecting Yes <\/strong>at the User Account Control prompt.<\/p>\n<\/p>\n
    Sudo triggers UAC<\/a><\/p>\n
    Sudo triggers UAC<\/p>\n<\/div>\n
    Netstat runs in an elevated window, which closes automatically once execution is complete.<\/p>\n<\/p>\n
    Executing a command with sudo in a new window<\/a><\/p>\n
    Executing a command with sudo in a new window<\/p>\n<\/div>\n
    Normal mode<\/h3>\n<\/p>\n
    Normal mode runs elevated commands in the same terminal window \u2014 like sudo<\/em> on Linux.<\/p>\n<\/p>\n
    You can manage Sudo\u2019s configuration through its config<\/em> subcommand. The following commands will put Sudo in normal<\/em> mode to run netstat<\/em>.<\/p>\n<\/p>\n
    sudo sudo config --enable normal<\/p>
    sudo netstat -ab<\/p>
    <\/pre>\n<\/p>\n
    Running sudo in normal mode<\/a><\/p>\n
    Running sudo in normal mode<\/p>\n<\/p>\n
    DisableInput mode<\/h3>\n
    DisableInput mode is akin to normal mode except for the fact that commands running in this mode are unable to accept user input. In the standard mode, you can initiate a new elevated shell, such as cmd<\/em>, and consequently execute a series of commands with superior privileges. This can be equated with the default sudo<\/em> behavior on Linux.<\/p>\n
    In the disableInput<\/em> mode, this is unfeasible. This forms a security measure that hinders potentially malevolent code from infusing keystrokes into the elevated console.<\/p>\n
    sudo sudo config --enable disableInput<\/p>
    sudo cmd<\/p>
    <\/pre>\n<\/p>\n
    The latter command corresponds to sudo su<\/em> on Linux.<\/p>\n<\/p>\n
    Running sudo in disableInput mode<\/a><\/p>\n
    Sudo for Windows vs. Sudo for Linux<\/h2>\n<\/p>\n
    Sudo for Windows only supports a subset of the features of its Linux counterpart. One key difference is that Sudo for Windows does not support a udoers<\/em> file. The sudoers<\/em> file in Linux is a configuration file that specifies which users or groups can run commands as root or other users through the sudo<\/em> command, providing fine-grained access control.<\/p>\n<\/p>\n
    Sudo<\/em> for Linux also enables you to run commands as any user. Sudo for Windows only allows you to run commands as an Administrator.<\/p>\n
    Conclusion<\/h2>\n
    This article gave you a hands-on look at Sudo for Windows, differentiating it from existing solutions. If you have tried the new Windows feature, please share your experience in the comments below.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"
    Sudo for Windows has been available since Build 26052 and is currently only accessible through the Windows Insiders program as part of preview builds for Windows 11. At this time, it appears that sudo will not come to Windows Server 2025. In this article, I explain how to use sudo in Windows 11 and compare […]<\/p>\n","protected":false},"author":1,"featured_media":9242,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[92,114,119,99],"tags":[],"class_list":["post-9241","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","category-security","category-windows","category-windows-11"],"_links":{"self":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts\/9241","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/comments?post=9241"}],"version-history":[{"count":1,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts\/9241\/revisions"}],"predecessor-version":[{"id":10271,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts\/9241\/revisions\/10271"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/media\/9242"}],"wp:attachment":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/media?parent=9241"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/categories?post=9241"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/tags?post=9241"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}