Elevate user rights versus RunAs

[Wes]

Is there any way that I can temporarily elevate a user's rights/memberships?
I have an app that requires each user to have admin rights to properly
execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the user
account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be performed.
Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights to
a user for a specific period of time (Ex. 1hr or until logoff).

Any ideas?

Thanks,
Wes

 

[Malke]

Is there any way that I can temporarily elevate a user's
rights/memberships? I have an app that requires each user to have admin
rights to properly execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the
user account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be
performed. Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights
to a user for a specific period of time (Ex. 1hr or until logoff).

You are describing the ever-useful sudo in *nix operating systems. Windows
doesn't have the equivalent, although there are a few third-party apps such
as WinSudo (which I haven't tried).

However, Microsoft's Aaron Margosis's MakeMeAdmin might work for you:

http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

Malke

 

[Anteaus]

You can tell RunAs not to load a different profile, which might help.

But for a utility to to elevate a user, here's one I made earlier:

http://mylogon.net/su