PC Review Forums Newsgroups Windows XP Windows XP Security Automation and user rights

Reply

Automation and user rights

 
Thread Tools Rate Thread
Old 17-06-2004, 04:52 PM   #1
Thad Brister
Guest
 
Posts: n/a
Default Automation and user rights


Is there any way to configure a particular program to
always run with administrative rights, wihtout the user
needing an administrator password?

One of the users in our network need sadministrative
rights to properly run a particular program. However, we
do not want the user to have admin rights in any other
case...only for the running of this program. We could use
runas...but I can't find anyway to automate runas so the
user doesn't have to enter the password. Anyone have any
ideas?
  Reply With Quote
Old 17-06-2004, 07:07 PM   #2
Torgeir Bakken \(MVP\)
Guest
 
Posts: n/a
Default Re: Automation and user rights

Thad Brister wrote:

> Is there any way to configure a particular program to
> always run with administrative rights, wihtout the user
> needing an administrator password?
>
> One of the users in our network need sadministrative
> rights to properly run a particular program. However, we
> do not want the user to have admin rights in any other
> case...only for the running of this program. We could use
> runas...but I can't find anyway to automate runas so the
> user doesn't have to enter the password. Anyone have any
> ideas?

Hi


Using the /savecred switch (only for WinXP Pro, not Home) is
maybe an option:

http://groups.google.com/groups?as_...r=lang_en&hl=en

and from "runas /?":

/savecred to use credentials previously saved by the user.
This option is not available on Windows XP Home Edition
and will be ignored.

Note that this is not a very safe solution, because the user
can then run any program using the /savecred switch later on.


Some better solutions:

You might get something to work using a Runas wrapper utility or
similar, take a look here:

http://groups.google.com/groups?sel...875%40hydro.com


You may also want to check NeoExec ( http://www.neovalens.com ), the
main difference is that it does not require the use of a second account,
as all RunAs derivative require.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/co...er/default.mspx
  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off