Is there a way to configure an XP machine so that when it runs IE it
runs it as another user?

Alternatively, can one create either an HTML file or a HTA file having
a link such that when you click on the link you automatically run IE
as another user? An example would be great!

Here's the background:

Users typically have an account on two domains: abc and zyx.

The NT username and password are the same on both abc and zyx.

Users on zyx can access a web application that uses NT authentication.

Users on abc can not access the web application - but can access it if
they create an Explorer desktop icon and use the "Run As" option they
get when they right click.

(It's a business requirement not to use an icon and the "Run As"
option.)

Suggestions and tips are appreciated.

If you know of better newsgroups for this question that would helpful
too.

Thanks.

I don't know of a way to do what you want. In that scenario, I would assume
all sorts of security issues would arise...

--

Jon Kennedy, MS MVP/IE
Charlotte, NC, USA
(E-Mail Removed)


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Is there a way to configure an XP machine so that when it runs IE it
> runs it as another user?
>
> Alternatively, can one create either an HTML file or a HTA file having
> a link such that when you click on the link you automatically run IE
> as another user? An example would be great!
>
> Here's the background:
>
> Users typically have an account on two domains: abc and zyx.
>
> The NT username and password are the same on both abc and zyx.
>
> Users on zyx can access a web application that uses NT authentication.
>
> Users on abc can not access the web application - but can access it if
> they create an Explorer desktop icon and use the "Run As" option they
> get when they right click.
>
> (It's a business requirement not to use an icon and the "Run As"
> option.)
>
> Suggestions and tips are appreciated.
>
> If you know of better newsgroups for this question that would helpful
> too.
>
> Thanks.
>

Look here:
start --> run: cmd.exe
type:
runas /?
runas ........ /savecred

Finaly make a shortcut...


<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
| Is there a way to configure an XP machine so that when it runs IE it
| runs it as another user?
|
| Alternatively, can one create either an HTML file or a HTA file having
| a link such that when you click on the link you automatically run IE
| as another user? An example would be great!
|
| Here's the background:
|
| Users typically have an account on two domains: abc and zyx.
|
| The NT username and password are the same on both abc and zyx.
|
| Users on zyx can access a web application that uses NT authentication.
|
| Users on abc can not access the web application - but can access it if
| they create an Explorer desktop icon and use the "Run As" option they
| get when they right click.
|
| (It's a business requirement not to use an icon and the "Run As"
| option.)
|
| Suggestions and tips are appreciated.
|
| If you know of better newsgroups for this question that would helpful
| too.
|
| Thanks.
|

runas /noprofile /user:mymachine\administrator "C:\Program Files\Internet
Explorer\iexplore.exe"

The problem is you cannot add the account user password in the script or cmd
line.

When I've used this issue Runas Feature in the past it has worked, but once
you install IE7 you cannot run IE as a different user. IE7 has security
restrictions that causes it to only run under a single instance. There are
registry key's that can be changed to allow this fuctionality but it can
cause major changes to the way windows handles IE.

kevin
--
Kevin Callanan
MSCA 2003, A+, Network+
weblabtechs.blogspot.com

Please let us know if this response was helpful...


"(E-Mail Removed)" wrote:

> Is there a way to configure an XP machine so that when it runs IE it
> runs it as another user?
>
> Alternatively, can one create either an HTML file or a HTA file having
> a link such that when you click on the link you automatically run IE
> as another user? An example would be great!
>
> Here's the background:
>
> Users typically have an account on two domains: abc and zyx.
>
> The NT username and password are the same on both abc and zyx.
>
> Users on zyx can access a web application that uses NT authentication.
>
> Users on abc can not access the web application - but can access it if
> they create an Explorer desktop icon and use the "Run As" option they
> get when they right click.
>
> (It's a business requirement not to use an icon and the "Run As"
> option.)
>
> Suggestions and tips are appreciated.
>
> If you know of better newsgroups for this question that would helpful
> too.
>
> Thanks.
>
>

this will probably accomplish what you to do.

google "dropmyrights"

it is a pc mag program to change your rights on a program basis so you
don't get on the net as an administrator.

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Is there a way to configure an XP machine so that when it runs IE it
> runs it as another user?
>
> Alternatively, can one create either an HTML file or a HTA file having
> a link such that when you click on the link you automatically run IE
> as another user? An example would be great!

A HTA would need an icon to launch, doesn't that break your 'business
requirement'?

>
> Here's the background:
>
> Users typically have an account on two domains: abc and zyx.
>
> The NT username and password are the same on both abc and zyx.
>
> Users on zyx can access a web application that uses NT authentication.
>
> Users on abc can not access the web application - but can access it if
> they create an Explorer desktop icon and use the "Run As" option they
> get when they right click.

Two solutions that should work. Have users add the site name to their
Intranet zone. IE will then use the current credentials to logon. Even
though the users are on different domains the credentials (being the same)
should work.

Failing that create a trust relationship between the zyx and abc domains and
grant abc users access to the site. This still requires all users to have
the site recognized by IE as being in the intranet domain.

--
Anthony Jones - MVP ASP/ASP.NET

No. The HTA would replace the user's default home page and have a link
that calls WScript and then IE.

>
> A HTA would need an icon to launch, doesn't that break your 'business
> requirement'?
>

Sorry, Intranet Zone?

Thanks for the tip. I'll toss the idea out to the desktop engineers.

>
> Two solutions that should work. Have users add the site name to their
> Intranet zone. IE will then use the current credentials to logon. Even
> though the users are on different domains the credentials (being the same)
> should work.
>
> Failing that create a trust relationship between the zyx and abc domains and
> grant abc users access to the site. This still requires all users to have
> the site recognized by IE as being in the intranet domain.
>
> --
> Anthony Jones - MVP ASP/ASP.NET

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> No. The HTA would replace the user's default home page and have a link
> that calls WScript and then IE.
>

I didn't realise you could set IEs home page to point to HTA, I'll have to
try that.

BTW, do the users normally launch IE without using an Icon?


--
Anthony Jones - MVP ASP/ASP.NET

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Sorry, Intranet Zone?
>

IE assigns Zones to various types of URL. For example a URL that identifies
the server using only a host name not a fully qualified domain name is
assumed to be the in "Intranet Zone". Whereas most normal sites are
considered to be in the "Internet Zone".

By default the Intranet Zone is has less restrictive security than Internet
Zone.

In particular when an attempt to access a site fails due to access denied
and the site indicates it will accept windows credentials IE will only
attempt to use the current logged on users credentails if the site is in the
Intranet Zone.

--
Anthony Jones - MVP ASP/ASP.NET