Do i need Administrator priviliges to run an HTA?

Question

Hi,

I am trying to install an activex but my user has no admin priviliges. I saw an artical descirbing that HTA can install activeX as if it is an administrator. Do i need to be an administrator to run HTA? if not is this not a security loop hole?

Thanks, Arik

Answer 1

An HTA file is an application that has the same privileges as a .EXE or a .CMD file. Many people are confused about permissions because an HTA looks like a web page. An HTA uses the same technology as web pages, but it executes locally under the same security model as any other local application.

This means, that if you run your .HTA as Administrator, it can do things that require Administrator privileges. Ordinary users can run HTAs just fine. The security model is the same as for batch files, CMD files, WSH scripts and so on.