当以管理员身份运行公司名片只运行

这两行代码可让您检测当前用户是否正在以管理员身份运行：

$currentUser = [Security.Principal.WindowsIdentity]::GetCurrent()
$isAdmin = (New-Object Security.Principal.WindowsPrincipal $currentUser).IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)

但是为什么要停在那里？我对自己的一些需要admin的脚本感到恼火，因此我制作了非常漂亮的一小段代码，这些脚本会将脚本打包到后台。

$asJobOrElevate = {
        param($CommandInfo, [switch]$OnlyCommand, [string[]]$AdditionalModules, [Hashtable]$Parameter, [Switch]$RequireAdmin)

        $currentUser = [Security.Principal.WindowsIdentity]::GetCurrent()
        $isAdmin = (New-Object Security.Principal.WindowsPrincipal $currentUser).IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)

        if ($AsJob -or $Throttle -or (-not $isAdmin) -and $requireAdmin) {           
            if ($onlyCommand) {             
                $AdditionalModules = $AdditionalModules | Select-Object -Unique
                $myDefinition = [ScriptBLock]::Create("
$(if ($AdditionalModules) {"
    Import-Module '$($AdditionalModules -join ("','"))'
"})

function $commandInfo {
   $($commandInfo | Select-Object -ExpandProperty Definition)
 }
")                        
} else {
    $myModule = $CommandInfo.ScriptBlock.Module

    $AdditionalModules += $myModule | Split-Path
    $AdditionalModules += $myModule.RequiredModules | Split-Path
    $AdditionalModules = $AdditionalModules | Select-Object -Unique
    $myDefinition = [ScriptBLock]::Create("

$(if ($AdditionalModules) { "
    Import-Module '$($AdditionalModules -join ("','"))'
"})
")                   
 }
 $null = $Parameter.Remove('AsJob')                                    
 $null = $Parameter.Remove('Throttle')
 $null = $Parameter.Remove('RequireAdmin')                                    
 $myJob= [ScriptBLock]::Create("" + {                        
param([Hashtable]$parameter)                         

} + $myDefinition + "                        

        $commandInfo `@parameter                        
")      



          if ($Throttle) {

            $jobLaunched=  $false

            do {
                if ($myJobs) {
                    $myJobs | 
                        Receive-Job
                }


                $runningJobs = $myJobs | 
                    Where-Object { $_.State -ne 'Running' }
 if ($runningJobs) {
                    $runningJobs | 
                        Remove-Job -Force
                }



                if ($myJobs.Count -lt $throttle) {
                    $null = Start-Job -Name "${MyCmd}_Background_Job" -ScriptBlock $myJob -ArgumentList $Parameter
                    $JobLaunched = $true
                }

                $myJobs =  Get-Job -Name "${MyCmd}_Background_Job" -ErrorAction SilentlyContinue
                Write-Progress "Waiting for Jobs to Complete" "$($myJobs.Count) Running" -Id $ProgressId  
            } until ($jobLaunched)

            $myJobs =  Get-Job -Name "${MyCmd}_Background_Job" -ErrorAction SilentlyContinue
            $myJobs  | 
                Wait-Job | 
                Receive-Job
            return 
        } elseif ($asJob) {
            return Start-Job -ScriptBlock $myJob -ArgumentList $Parameter -Name "${CommandInfo}_Background_Job"

        } elseif ((-not $isAdmin) -and $RequireAdmin) {
                $fullCommand = "
 `$parameter = $(Write-PowerShellHashtable -InputObject $parameter)
 & { $myJob } `$parameter

 "

            $encodedCommand = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($fullCommand))


            return  Start-Process powershell -Verb Runas -ArgumentList '-encodedCommand', $encodedCommand -PassThru

        }
    }
    }

原谅可怕的压痕。长代码块不是StackOverflow的朋友。如果您使用以下行运行该脚本块：

$launched = . $asJobOrElevate $MyInvocation.MyCommand -Parameter $psBoundParameters -RequireAdmin

如果还不是管理员，它将以管理员身份启动，并带有UAC提示。它还支持在后台作业中运行命令或将其限制为许多正在运行的作业。

要在本地环境中查看此代码技巧（或者只是更轻松地进行复制/粘贴），请查看Powershell Pipeworks中ConvertTo-ModuleService的源代码。它在函数的顶部，并且是begin {}块中的第一件事。