Elevated privileges

[Seanl]

I have an application installed on a desktop that requires
the user to have admin rights in order to run the app.
There is no way I want to give the user admin rights on
the local machine. Is there someway to give the user
elevated rights on a specific application? I know that I
can use the runas command, only downside, is that the user
has to enter a password. I do not want the user to know a
password of an account that has admin rights.
Your help will be greatly appreciated.

 

[Jimmy Andersson]

You can do this with the Application Compatibility Toolkit. Check out:
http://msdn.microsoft.com/library/default.asp?url=/nhp/default.asp?contentid=28000911

Regards,
/Jimmy

 

[Torgeir Bakken (MVP)]

I have an application installed on a desktop that requires
the user to have admin rights in order to run the app.
There is no way I want to give the user admin rights on
the local machine. Is there someway to give the user
elevated rights on a specific application? I know that I
can use the runas command, only downside, is that the user
has to enter a password. I do not want the user to know a
password of an account that has admin rights.
Your help will be greatly appreciated.

Hi

One way is to use Sysinternals RegMon/FileMon utilities to find what registry
keys/file system folders the application need write access to and set rights
accordingly for the locked down user account (http://www.sysinternals.com)

Alternatively:

Some 3rd party RunAs solutions that "hides" (encrypt) username/password
are listed in the link below (buy solutions). Can be run from network shares,
so nothing needs to be installed on the client computers.

http://groups.google.com/[email protected]