Windows XP - RUN AS (Secondary Logon Service)

[ASW_26]

Hi,

I am currently setting up new security measures. One of which is to seperate
user and administration accounts and use the Run As feature to elevate
permissions according to task required.
I have created a second account for admins (which is a copy of original
account) and removed permissions from the original account etc. I have an
issue with the runas service where, I am unable to view the results of a
Volume Shadow Copy even when Windows Explorer has been elevated to admin
account level. I have even logged onto the PC as the admin account and tried
that and it WORKS fine, but not when using runas? Anyone got any ideas....I
am at a loss...!
(error received is as follows; The folder \\[folder location] does not exist.

 

[Shenan Stanley]

I am currently setting up new security measures. One of which is to
seperate user and administration accounts and use the Run As
feature to elevate permissions according to task required.
I have created a second account for admins (which is a copy of
original account) and removed permissions from the original account
etc. I have an issue with the runas service where, I am unable to
view the results of a Volume Shadow Copy even when Windows Explorer
has been elevated to admin account level. I have even logged onto
the PC as the admin account and tried that and it WORKS fine, but
not when using runas? Anyone got any ideas....I am at a loss...!
(error received is as follows; The folder \\[folder location] does
not exist.

When using RUN AS are you also mapping whatever drives you have mapped as
the user you are currently logged in as for the user you are inputting the
RUN AS for?

In other words, when you log in as "Bob-non-admin" and have a drive mapped
to \\server\sharename - when you do the RUN AS and choose "Bob-admin", the
"Bob-admin" will not have the same drive mappings as "Bob-non-admin" unless
you make it so.

(If doing whatever it is you are trying to do needs mapped shares, etc.)

 

[ASW_26]

I have not done this by mapping a drive, just a UNC path from within the
elevated Windows Explorer.

I am currently setting up new security measures. One of which is to
seperate user and administration accounts and use the Run As
feature to elevate permissions according to task required.
I have created a second account for admins (which is a copy of
original account) and removed permissions from the original account
etc. I have an issue with the runas service where, I am unable to
view the results of a Volume Shadow Copy even when Windows Explorer
has been elevated to admin account level. I have even logged onto
the PC as the admin account and tried that and it WORKS fine, but
not when using runas? Anyone got any ideas....I am at a loss...!
(error received is as follows; The folder \\[folder location] does
not exist.

When using RUN AS are you also mapping whatever drives you have mapped as
the user you are currently logged in as for the user you are inputting the
RUN AS for?

In other words, when you log in as "Bob-non-admin" and have a drive mapped
to \\server\sharename - when you do the RUN AS and choose "Bob-admin", the
"Bob-admin" will not have the same drive mappings as "Bob-non-admin" unless
you make it so.

(If doing whatever it is you are trying to do needs mapped shares, etc.)