Sudon't

Description of the new feature / enhancement

While there are many ways to start elevated processes from unelevated shells, starting unelevated processes from elevated shells is a rather difficult task in Windows. runas.exe and launching through explorer are available options, but each present their own limitations. Sudo for Windows provides an opportunity to add an easier avenue for accomplishing this task.

Scenario when this would be used?

Just as sudo is useful for running elevated processes out of an unelevated shell without having to open a new administrative terminal, a "sudon't" command would be useful for starting unelevated tasks out of elevated sessions without having to open a new non-administrative console. This would be useful for any task that where elevated permissions provide little more than a security risk, as well as for certain programs that behave differently based on permission levels, such as some application installers. Another use-case would be in scripts that run elevated but may wish to start tasks unelevated for the same reasons, but struggle even more so with the issue due to not being able to manually open a new shell to run the command.

Supporting information

It doesn't actually have to be called sudont (but it should).

The issue proposes a sudon't command and identifies runas.exe and explorer as existing alternatives, but names no repository files or tests. Start by locating the existing sudo command entry point and Windows process-launching path; done means the proposed command starts tasks unelevated from an elevated session and has coverage for the stated scenarios.