I have an application installed on a desktop that requires
the user to have admin rights in order to run the app.
There is no way I want to give the user admin rights on
the local machine. Is there someway to give the user
elevated rights on a specific application? I know that I
can use the runas command, only downside, is that the user
has to enter a password. I do not want the user to know a
password of an account that has admin rights.
Your help will be greatly appreciated.

You can do this with the Application Compatibility Toolkit. Check out:
http://msdn.microsoft.com/library/de...entid=28000911

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------


"Seanl" <(E-Mail Removed)> wrote in message
news:026601c37065$75e2c6f0$(E-Mail Removed)...
> I have an application installed on a desktop that requires
> the user to have admin rights in order to run the app.
> There is no way I want to give the user admin rights on
> the local machine. Is there someway to give the user
> elevated rights on a specific application? I know that I
> can use the runas command, only downside, is that the user
> has to enter a password. I do not want the user to know a
> password of an account that has admin rights.
> Your help will be greatly appreciated.

Seanl wrote:

> I have an application installed on a desktop that requires
> the user to have admin rights in order to run the app.
> There is no way I want to give the user admin rights on
> the local machine. Is there someway to give the user
> elevated rights on a specific application? I know that I
> can use the runas command, only downside, is that the user
> has to enter a password. I do not want the user to know a
> password of an account that has admin rights.
> Your help will be greatly appreciated.

Hi

One way is to use Sysinternals RegMon/FileMon utilities to find what registry
keys/file system folders the application need write access to and set rights
accordingly for the locked down user account (http://www.sysinternals.com)

Alternatively:

Some 3rd party RunAs solutions that "hides" (encrypt) username/password
are listed in the link below (buy solutions). Can be run from network shares,
so nothing needs to be installed on the client computers.

http://groups.google.com/groups?selm...6D%40hydro.com


--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter