GPO policy: "Configure the behavior of the sudo command" under Computer Configuration > Administrative Templates > System. Controls the Windows 11 24H2 sudo.exe command line tool, which allows users to run elevated commands directly from an unelevated console session. Registry: HKLM\SOFTWARE\Policies\Microsoft\Windows\Sudo:Enabled (REG_DWORD). Reference: What's new in Windows 11, version 24H2 (Sudo for Windows)
Values
| Enum Value | Description |
|---|---|
|
|
The sudo.exe command line tool is disabled. |
|
|
Sudo runs the elevated command in a new window. |
|
|
Sudo runs the elevated command with input to it disabled. |
|
|
Sudo runs the elevated command inline in the current console. |
Used by
ComputerAdministrativeTemplatestype: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.
Example
Example
"DISABLED"