Automation and user rights  
Author Message
Jack





PostPosted: Thu Jun 17 13:07:06 CDT 2004 Top

Windows XP Security >> Automation and user rights Is there any way to configure a particular program to
always run with administrative rights, wihtout the user
needing an administrator password?

One of the users in our network need sadministrative
rights to properly run a particular program. However, we
do not want the user to have admin rights in any other
case...only for the running of this program. We could use
runas...but I can't find anyway to automate runas so the
user doesn't have to enter the password. Anyone have any
ideas?

Windows XP869  
 
 
Torgeir





PostPosted: Thu Jun 17 13:07:06 CDT 2004 Top

Windows XP Security >> Automation and user rights Thad Brister wrote:

> Is there any way to configure a particular program to
> always run with administrative rights, wihtout the user
> needing an administrator password?
>
> One of the users in our network need sadministrative
> rights to properly run a particular program. However, we
> do not want the user to have admin rights in any other
> case...only for the running of this program. We could use
> runas...but I can't find anyway to automate runas so the
> user doesn't have to enter the password. Anyone have any
> ideas?
Hi


Using the /savecred switch (only for WinXP Pro, not Home) is
maybe an option:

http://groups.google.com/groups?as_q=runas%20savecred&safe=images&ie=ISO-8859-1&as_ugroup=microsoft.public.windowsxp.*&lr=lang_en&hl=en

and from "runas /?":

/savecred to use credentials previously saved by the user.
This option is not available on Windows XP Home Edition
and will be ignored.

Note that this is not a very safe solution, because the user
can then run any program using the /savecred switch later on.


Some better solutions:

You might get something to work using a Runas wrapper utility or
similar, take a look here:

http://groups.google.com/groups?selm=3FE0B42C.773CA875%40hydro.com


You may also want to check NeoExec ( http://www.neovalens.com ), the
main difference is that it does not require the use of a second account,
as all RunAs derivative require.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx