enabling certain services for only certain accounts

[Chris Cowles]

I have a VPN client from my employer set up on my home workstation. Part of
the requirements are to install BlackIce. The VPN connection routinely
checks if BlackIce is running and disconnects if it's not. The BlackIce
install is locked so a user can't configure it.

I believe BlackIce is interfering with my sharing resources my XP Pro
workstation with a Win98 workstation connected by a 10mb hub and a WAP. Both
workstations access the web through a Westell DSL modem so are protected at
least nominally by a hardware firewall. My problem is that I have no way to
tweak Black Ice to allow connections from the Win98 workstation ip address
to the XP workstation.

My first step will be to manually disable the blackice service in System:
Manage. If that enables connection, I'd like to figure out how to
enable/disable black ice automatically for only one certain local account on
the XP workstation. Can that be done? I'm thinking of something like
including or excluding an executable in an individual users 'startup' menu,
but I need to apply that logic to something running as a service rather than
as an application. I only use one account for connection to work and other
accounts for personal use.

Help is appreciated.

Chris Cowles
Gainesville, FL

 

[Roger Abell]

Normally, starting, pausing, resuming, and stopping services
are actions reserved to administrator accounts.
All services has a name that can be used with syntax
net stop dnscache
net start dnscache
(example stops and starts the caching DNS resolver)
So, you would only need determine the service names
and be an admin.
It might be more simple to set their version of BlackIce
to not run, and only enable it when you want to connect
to the office (one more manual step when you VPN in)
and run some other firewall the rest of the time.

 

[Chris Cowles]

Thanks for your response.

Can you pass a user name and password, emulating a 'run as'?