Elevate user rights versus RunAs


W

Wes

Is there any way that I can temporarily elevate a user's rights/memberships?
I have an app that requires each user to have admin rights to properly
execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the user
account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be performed.
Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights to
a user for a specific period of time (Ex. 1hr or until logoff).

Any ideas?

Thanks,
Wes
 
Ad

Advertisements

M

Malke

Wes said:
Is there any way that I can temporarily elevate a user's
rights/memberships? I have an app that requires each user to have admin
rights to properly execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the
user account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be
performed. Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights
to a user for a specific period of time (Ex. 1hr or until logoff).

You are describing the ever-useful sudo in *nix operating systems. Windows
doesn't have the equivalent, although there are a few third-party apps such
as WinSudo (which I haven't tried).

However, Microsoft's Aaron Margosis's MakeMeAdmin might work for you:

http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

Malke
 
Ad

Advertisements


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top