"Run AS" but with restrictions

[Spyro Polymiadis]

Ive got a new question, following the same path of the topic.. is there
a way to setup auditing of windows logins, (i know there is) but moreso,
is there a way to email the "log" daily? like maybe a scheduled task
that runs a batch file that exports the audit entries to a file and
emails it?

Cheers
Spyro

 

[Karl Levinson]

You'd get more replies if you start a new thread for this.

But yes, I've done this. Two utilities that can export and filter Windows
event log files are from www.sysinternals.com, and the free dumpel utility
from Microsoft:

www.microsoft.com/downloads/details.aspx?FamilyID=c9c31b3d-c3a9-4a73-86a3-630a3c475c1a&displaylang=en

You can run the utility every hour or day and tell it to only inspect log
files from the past hour or day, or you could keep a copy of the last file
generated and use the FC command to compare that with the latest file
generated, in order to see if there have been any changes since the last
time the utility ran.

One utility that can generate emails based on these files is Blat, which can
be found by googling.

 

[Karl Levinson]

There are also a variety of free tools that will let you spit all the
windows event log entries you want to a central syslog server, then you can
set up scripts and reports to notify you of that data, in order to monitor
all log files centrally. Snare is one tool that can do this, as is
ntsyslog.

 

[Spyro Polymiadis]

I think ive worked out a much much simpler way to solve my predicament..
- Forget the bf2 user, runas problems, permissions and all the rest..

Ive found a nice program called tqcrunas. This program lets me "create"
a kind of executable, where I put in the exe to run, the admin user and
pass, and a bunch of other options, then save out the file. Then the
limited user runs that file to run battlefield, and it just runs the
bf2.exe with admin privs and doesnt require inputting the password as
its encrypted with the file... This solves, and also allows me now to
create a bunch of things people need "admin" access to and I dont have
to keep going to the pc to "type the password", just create a file for
them, copy it to their pc, and tell them to "just run this file".

Cheers all for you help, its all been a big help.

Cheers
Spyro