Sudo for Windows (2024)

(github.com)

76 points | by luispa 21 hours ago

19 comments

  • petterroea 17 hours ago
    sudo makes sense as a name, but it is worth noting that it hurts the original projects.

    Famously, the curl project receives tonnes of issues and support requests from people who run `curl` in PowerShell, not knowing it is an alias meant for convenience instead of the actual curl command[1].

    Sudo for windows is already relatively old and doesn't seem to have been adopted much, but my prediction is that adoption would mean people would complain on forums that commands they found on the internet don't work. "Why wouldnt it? I have sudo?". Then people will have to explain to them that "No you do not have sudo, you have the windows version of sudo, which is not real sudo" and it will confuse.

    When it comes to tools, I strongly believe naming things similarly to concepts the user already knows is a disservice to the user. This isn't UX for your mom and pop, it is a tool to perform a job, and learners get confused when suddenly the same thing isn't actually the same thing at all. It is mislearning, and I would argue almost anyone who does mentoring has seen this in action.

    [1]: https://daniel.haxx.se/blog/2016/08/19/removing-the-powershe...

    • steve1977 16 hours ago
      > sudo makes sense as a name

      It doesn't though. There is no concept of a singular superuser like there is on UNIX. On Windows you have Administrator, but that is a role that can be assigned to any user.

      And Administrators do not have full power, that would be the SYSTEM user. Which you cannot switch to with Sudo for Windows however - but you can with the runas tool, which has been around for decades.

      • vbezhenar 16 hours ago
        Minor nitpick, but there's not necessarily a single super user in UNIX. You can create multiple users with uid=0 and they all will be super users.
        • steve1977 15 hours ago
          See sibling reply. The uid is what defines the user, the name is just a convenient alias.
          • vbezhenar 15 hours ago
            Not really. You can have separate users with separate $HOME, separate passwords, separate groups, separate everything.

            User is user. Uid is uid. It's not the same. Uid is used for file permissions, that's true.

            • ButlerianJihad 14 hours ago
              If you try and set up "separate users" with "separate $HOME" that map to the same UID, all those "users" will "own" all those same files, and all processes started by one another. They would be able to kill processes, delete/modify/add files, impersonate one another. Because they are the same user.

              You would be unable to enforce quotas or privacy for any of them. Whatever they did on the system would be indistinguishable, because their process UIDs would be identical. Any files they created would be owned the same. Sure, set them up with unique lists of GIDs; it really doesn't matter in the end.

              I have no idea what you mean "User is user", but you are right: UID is not the same as a username. The username exists only in the passwd(5) database, and not in the kernel, like at all. The kernel has no idea what usernames are, and that's why they're irrelevant to user administration.

        • ButlerianJihad 16 hours ago
          But they all have the same UID, and are technically "the same user", even if you foolishly confer disparate usernames and passwords on them. When the system reverse-maps their UID it will display "root" because there is, ultimately, only one superuser on Unix.

          The situation is the same for any userid and any groupid. If you try creating three ordinary users with a UID of 3005, they will be, essentially, the same user. There is no way at the system level to differentiate them, after they have authenticated. Because their files and processes are owned by the same UID.

          This sharing of UIDs is generally discouraged and quite undesirable. It makes systems administration a real mess.

      • tracker1 4 hours ago
        Niggle: "su" from "sudo" is for substitute/switch user in the su command, not "super" at all. By default the user being switched to in su is root/uid:0.

        There's no such thing as "Super User" in context usage.

    • boomlinde 16 hours ago
      Hopefully these aliases will be renamed to "Copilot-Sudo" and "Copilot-Curl" soon enough.
      • eddythompson80 15 hours ago
        Uh clearly you don't PowerShell enough. It should be `Invoke-CopilotSudo`
      • dainank 15 hours ago
        Maybe `wudo`? Windows Sudo!
        • al_borland 15 hours ago
          If sudo stands for “superuser do”, and on Windows they call this user an “Administrator”. It stands to reason they should call it `audo`.

          Though this would be confusing, as people would pronounce it like “adieu”, which would make it sound like an alias for `logoff`.

          • NekkoDroid 15 hours ago
            > It stands to reason they should call it `audo`.

            "Administrator" doesn't contain a "u". `addo`/`ado` both would make more sense and flows better off the tongue.

            • amenhotep 4 hours ago
              And once the initial install of something was complete, you'd then be able to run it with no further ado :D
            • al_borland 14 hours ago
              SuperUser DO

              Administrator User DO

        • miroljub 15 hours ago
          Or 'mudo', Microsoft sudo.

          With the added benefit of having appropriate meaning in some slavic languages.

          • leeman2016 10 hours ago
            How about ms-sudo/mssudo and ms-curl/mscurl
    • 1718627440 3 hours ago
      There is more than one sudo implementation though and the configuration can be already different. Also I don't think you accidentally forget whether you are in a POSIX or a CMD shell.
    • Pay08 16 hours ago
      > Famously, the curl project receives tonnes of issues and support requests from people who run `curl` in PowerShell, not knowing it is an alias meant for convenience instead of the actual curl command[1].

      Well, that explains a lot of the issues I was running into a few weeks ago...

    • pletnes 15 hours ago
      The curl alias in powershell is not compatible so it is an inconvenience. Must be one of the worst decisions to make it into windows, which is saying a lot.
      • NekkoDroid 14 hours ago
        The worst part is that Windows does ship cURL as a binary at `C:\Windows\System32\curl.exe` (may be dependent on some optional feature, dunno). Nowadays it does invoke this for me on my system, but I don't remember if I did something for this to be the case.
      • al_borland 15 hours ago
        Most of the aliases are for convenience when working in an interactive shell, which will generally be dealing with more basic functions of a command. For scripting it is best practice to use the full commandlet names.
        • pletnes 10 hours ago
          Browsers let me copy-paste curl commands from developer tools. These don’t work with windows «curl».

          I know a few flags of curl too. These also don’t generally work with «curl».

          • naikrovek 4 hours ago
            So type “curl.exe” instead of “curl” or remove the alias in PowerShell.
    • fainpul 14 hours ago
      If you're on Windows, run this once:

        'Remove-Alias curl, wget' >> $PROFILE
      
      Now please stop whining about these stupid aliases.
      • petterroea 10 hours ago
        This feels like a very dishonest take because the problem being discussed is clearly beginners being confused. How does your solution scale to the problem at hand?
        • fainpul 10 hours ago
          Of course it doesn't help if a beginner doesn't understand why their curl command fails. I wrote this half in jest, because everytime PowerShell comes up, people like to Bash it for its stupid aliases on Windows. Yes these aliases are really stupid, but if you are using PS on Linux, it's not an issue and if you are on Windows, you just remove those aliases and continue living your life.

          Some examples from this discussion:

          > The curl alias in powershell is not compatible so it is an inconvenience.

          > *nix fanboys were totes fine with wget and ls being an aliases in PowerShell for years but when they found out what PS is coming to Linux they made a biggest stink.

          > Only the old powershell.exe builtin to Windows has these aliases and it’s worse today because curl.exe is builtin and the curl alias takes priority when you run just curl.

          > It's wget for Windows all over again

          > Ah yes, the 'curl' alias in powershell, vs the 'curl.exe' binary that uses the traditional options.

          • tracker1 4 hours ago
            And thus, I mostly use git's msys bash in my work Windows machine(s).
    • pjmlp 11 hours ago
      > Sudo for windows is already relatively old and doesn't seem to have been adopted much,...

      Because probably this was pushed due to meet some OKRs ("made an impact").

      It adds nothing over runas, other than being a known name to folks educated in UNIX.

      Which is hardly of any benefit, given that Windows is not UNIX.

      • tjarjoura 10 hours ago
        It seems like this adds much tighter integration between the caller and callee processes used named pipes and RPC communication, such as being able to share input/output streams within the same terminal session, which is a significant value add compared to runas.exe.
    • tpoacher 14 hours ago
      Indeed. This is the "Embrace" stage.
    • justsomehnguy 16 hours ago
      >> Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning.[0]

      Between that quote and "You can't fix stupid" I always choose the one about circus.

      *nix fanboys were totes fine with wget and ls being an aliases in PowerShell for years but when they found out what PS is coming to Linux they made a biggest stink. It didn't even mattered what 99.999% of the scripts which utilized that call were the simple 'get file' and nothing more.

      [0] https://en.wikiquote.org/wiki/Rick_Cook#The_Wizardry_Compile...

      • petterroea 14 hours ago
        I think Powershell and .net coming to linux is very welcome because I can keep hosting stuff with what I believe is a saner platform, and Windows developers can still keep using the platform they prefer. It's a win-win.

        IMO .net is much better than Java, at least it was 10 years ago. So it's not like I don't understand them.

        • tracker1 3 hours ago
          I just don't like the verbosity of Powershell myself... For that matter, I've trended towards using TypeScript (via Deno) for my user scripts that need more than basic shell interactions. I can reference any repository modules directly, use a shebang in the top of the script with self/executable, and no install step.

          For that matter, deno in a shebang for an extensionless file now detects as a TypeScript file properly in VS Code. win-win-win. While being portable with a relatively small executable surface (deon executable only).

      • jborean93 15 hours ago
        > *nix fanboys were totes fine with wget and ls being an aliases in PowerShell for years but when they found out what PS is coming to Linux they made a biggest stink

        The curl and wget aliases don’t exist on the PowerShell 7 version which is the cross platform one. Only the old powershell.exe builtin to Windows has these aliases and it’s worse today because curl.exe is builtin and the curl alias takes priority when you run just curl.

        • justsomehnguy 4 hours ago
          Thanks, I'm with PS since v1.0.

          > Only the old powershell.exe builtin to Windows

          It's "Windows PowerShell" which would be forever v5.1 and "PowerShell" is v7+.

          (we don't talk about "PowerShell Core")

          > builtin and the curl alias takes priority when you run just curl

          Yes, but again if somebody didn't bother to read the docs, read the output (it's very evident when you have some PS error vs. everything else - and people STILL don't bother to try to understand) and start bitching on the forums... see my previous comment.

          And by the way: it was established quite early what the use of an aliases in the written code should be frowned upon, exactly for the reason what the aliases aren't stable and could be local. Aliases are the quick way when you are slapping something interactively in the CLI.

          So wget/curl were added for the benefit of those *nix fanboys who needed something better than cmd.exe on Windows so they could start using PS faster and later adopt to a proper ways but instead of reading the docs they only rose the stink.

    • petterroea 16 hours ago
      I, for one, have had to explain to Juniors multiple times that WSL isn't Linux, and why it's no replacement for Linux. Happens almost every time they try to do anything more advanced than a WSL hello world, and it inevitably fails.

      I still let them try, because it beats me having to check "is wsl good now", and they learn much better from personal experience than someone more senior who uses arch btw just telling them "don't use windows"

      • StableAlkyne 16 hours ago
        Interesting, I've been using it with zero issues (including performance) for several years now. Compiled stuff, ran scientific calculations, trained neural nets with GPU passthrough, even switched over a workload from an old Red hat box to WSL Alma.

        Only weirdness has been systemd can sometimes be quirky, and GUI stuff can be glitchy (which doesn't affect me much, because 99% of what I do is in the terminal)

        So, anecdotally it is perfectly adequate for workloads beyond a Hello World. What issues are you running into?

        • petterroea 16 hours ago
          Mostly its related to filesystem and permissions. Interface between windows and Linux, and mismatch in how the two work.

          Compute etc is fine!

          • tracker1 3 hours ago
            /mnt/c etc from within WSL, and access to Linux FS paths are effectively a plan-9 file share service... Beyond this, if you use Docker Desktop (or similar) with volumes on the host OS (Windows or Mac) it's a weird FS sync between the host and container environment)... if you do volumes in WSL2 inside a Linux/WSL environjment it works fine (normally).

            Permissions between Windows and Unix are always (generally) a mismatch, as is the nature of OS differences.

          • yread 16 hours ago
            Yeah its best to avoid using the windows filesystem for anything else but a source of cp -r
          • pjmlp 11 hours ago
            Hardly any different from mounting UNIX filesystems that don't obey exactly the same semantics.
      • pjc50 12 hours ago
        $ uname -a Linux MYPC 6.6.87.2-microsoft-standard-WSL2 #1 SMP PREEMPT_DYNAMIC Thu Jun 5 18:30:46 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

        Dunno, looks pretty Linux to me.

        (WSL1 did suck badly because it combined the limitations of NT - slow file ops and process spawn - with the limitations of a compatibility layer. WSL2 is good enough for compatibility testing work on e.g. dotnet)

      • tracker1 3 hours ago
        WSLv2 is indeed Linux... kernel and all... it's running in effectively a transparent VM with some utilities to aid in auto-mounting windows drives for access. WSLv1 used a translation layer (akin to WINE) to translate linux calls to windows calls. but WSL2 is indeed Linux.
      • tjarjoura 10 hours ago
        As someone who develops for both Windows and Linux I find WSL to be very useful. Much better than my previous method of dual booting Linux and Windows. I've yet to run into a problem that I needed to boot into native Linux for.
      • pjmlp 11 hours ago
        WSL 2.0 is literally a Linux VM running on top of Hyper-V, hardly any different of running a VM on a cloud vendor.

        Nowadays WSL implies version 2.0, who is still using the half done implementation of WSL 1.0?

        Or using Virtual Box, VMWare Workstation, QEMU,...

      • mastermage 12 hours ago
        wsl2 is literally just a linux vm isn't it?
        • pjmlp 11 hours ago
          Yep, running on Hyper-V.
      • bezier-curve 16 hours ago
        WSL1 is not Linux because it is mapping system calls from the Linux kernel ABI to NT. That sounds like what you're describing. WSL2 is a Microsoft distro running in a VM that integrates into Windows.

        I use WSL2 every day and it has some annoying quirks with how their Wayland implementation behaves with DWM, but otherwise it's just a Linux environment.

        • sterlind 3 hours ago
          WSL2 isn't exactly a distro. there's CBL-Mariner, which is a distro used for utility/plumbing, but it's pretty hidden internally. WSL2 is mostly:

          1) a lightly-patched Linux kernel

          2) a bunch of esoteric bridge stuff, namely:

          2A) 9P for mounting the Windows filesystem on Linux and vice-versa,

          2B) a Wayland server implemented via RDP(?!)

          2C) Hyper-V NICs, dynamic memory and other VM integrations.

          2D) even weirder esoterica like whatever magic lets CUDA work (and... directx? for reasons??)

          but there's no canonical (pun intended) userspace. there are many Linux distros available; adapting a distro is usually pretty easy. for example, NixOS-WSL is lightweight and works quite well.

          philosophically, WSL2 is a VM, but it's not an emulator, if that makes sense. there's a kind of convergence between OS and VM that's been going on for a decade and WSL2 has been riding that wave.

          (disclaimer: I work for MS but not on Windows or WSL. I just think the arch is neat.)

      • DeathArrow 16 hours ago
        Actually, WSL is pretty good for development. Of course, I wouldn't use WSL to run server software.
  • overflowy 19 hours ago
    We had https://github.com/gerardog/gsudo long before this came out.
    • tokyobreakfast 17 hours ago
      The hallmark of every successful Rust project: existence of a popular, equivalent software package not written in Rust.
    • manwe150 19 hours ago
      That fact appears to be mentioned in the docs for this sudo, as well as mentioning gsudo has more features
  • gnabgib 21 hours ago
    (2024) At the time (587 points, 423 comments) https://news.ycombinator.com/item?id=39305452
  • RajT88 17 hours ago
    Do you want to allow the following program from an unknown publisher to make changes to this computer?

    Program Name: Sudo.exe

    Publisher: Unknown

    File Origin: Downloaded from the Internet

  • userbinator 17 hours ago
    I'm surprised they didn't call it Run-AsAdministrator or some other awkward Microsoft-ism.
    • steve1977 16 hours ago
      Maybe because that exists already? (and is actually more useful)

      https://learn.microsoft.com/en-us/previous-versions/windows/...

    • al_borland 14 hours ago
      I spent some time years ago going through a PowerShell course by the guys who wrote it. They explained their thought process and it actually made a lot of sense. Descriptive verb-noun naming to makes scripts readable, with aliases to make things quick and easy in the shell.

      It’s easier to understand than names like grep, which require the user know ed and decades old history to figure out that it means global regular expression print. Without any *nix history, Select-String with an alias of sls, can make more intuitive sense and be easier to remember. The alias is also faster to type.

    • Diti 15 hours ago
      That would imply it is written for PowerShell specifically ([1]), and would come with several expectations (like returning PSObject objects, and other good practices).

      [1]: https://learn.microsoft.com/en-us/powershell/scripting/devel...

    • Diti 15 hours ago
      That would imply it is written in PowerShell. https://learn.microsoft.com/en-us/powershell/scripting/devel...
    • chrisandchris 17 hours ago
      That would be consistent, which is not something Microsoft is capable of.
  • onemoresoop 17 hours ago
    Lipstick on a pig, Windows is turning into a botched version of linux.
    • sph 1 hour ago
      I'm still betting on Microsoft buying Canonical one day and releasing their own distro.
    • garganzol 14 hours ago
      Windows always has been a Unix alter-ego since DOS 2.x which had started to accept '/' characters as directory separators, or maybe even before that.
    • al_borland 14 hours ago
      I keep waiting for Microsoft to give up on maintaining their own kernel and moving to Linux. Kind of like what they did with the browser engine, and building atop Chrome.
      • DaSHacka 13 hours ago
        Why would they ever do that though? Breaking backwards compatibility and losing all their work on the NT kernel for no gain?
  • twelvedogs 15 hours ago
    Unless this is improved greatly from the last time I used it is pointless, any command you would use it for instead requires you to right click, open as administrator a command prompt to get the expected result
  • G_o_D 17 hours ago
    https://m.majorgeeks.com/files/details/nsudo.html Been using it to run my cleanup or uninstaller utilities as SYSTEM/TRUSTED INSTALLER, so stubborn in use files that are not easily deletable not even with lockhunter or unlock file utilities that ultimately fallback to delete on next reboot.

    With nsudo its fizz

  • archargelod 17 hours ago
    > Everything about permissions and the command line experience is different between Windows and Linux. ... certain elements of the traditional sudo experience are not present in Sudo for Windows, and vice versa. Scripts and documentation that are written for sudo may not be able to be used directly with Sudo for Windows without some modification.

    Then why is it named `sudo`? Just to create confusion?

    Also, something like sudo is clearly not possible on modern Windows, because Microsoft thinks it owns your computer and won't allow Admins to do certain things.

    • LiamPowell 17 hours ago
      It's wget for Windows all over again, just like with wget there's absolutely zero arguments shared between the two that do the same thing.
      • jasonjayr 17 hours ago
        Ah yes, the 'curl' alias in powershell, vs the 'curl.exe' binary that uses the traditional options. Always have to remember that trap on windows.
  • 9dev 16 hours ago
    Funny that this pops up when Linux at the same time is moving on to something better than sudo.
    • eddythompson80 15 hours ago
      Are you referring to sudo-rs or something different? because sudo-rs is just a reimplementation of sudo.
  • paweladamczuk 17 hours ago
    The embracing continues
    • saintfire 17 hours ago
      Not really. It's not the same program at all. They just took the name for an inexplicable reason. They even had to make a paragraph disclaimer stating it isn't and never will be the same program.
  • DeathArrow 16 hours ago
    What's wrong with good old runas command?
    • jborean93 15 hours ago
      The runas command doesn’t elevate just runs as another user. This is a console executable that drives UAC and also provides a way to capture the stdout/stderr elevated process which isn’t natively possible today without your own wrapper.
  • SugarReflex 18 hours ago
    sudon't
  • ButlerianJihad 15 hours ago
  • julian00 5 hours ago
    [dead]