How configure an XP machine to run IE as another user by default

[gimme_this_gimme_that]

Is there a way to configure an XP machine so that when it runs IE it
runs it as another user?

Alternatively, can one create either an HTML file or a HTA file having
a link such that when you click on the link you automatically run IE
as another user? An example would be great!

Here's the background:

Users typically have an account on two domains: abc and zyx.

The NT username and password are the same on both abc and zyx.

Users on zyx can access a web application that uses NT authentication.

Users on abc can not access the web application - but can access it if
they create an Explorer desktop icon and use the "Run As" option they
get when they right click.

(It's a business requirement not to use an icon and the "Run As"
option.)

Suggestions and tips are appreciated.

If you know of better newsgroups for this question that would helpful
too.

Thanks.

 

[Jon Kennedy]

I don't know of a way to do what you want. In that scenario, I would assume
all sorts of security issues would arise...

 

[George Valkov]

Look here:
start --> run: cmd.exe
type:
runas /?
runas ........ /savecred

Finaly make a shortcut...


| Is there a way to configure an XP machine so that when it runs IE it
| runs it as another user?
|
| Alternatively, can one create either an HTML file or a HTA file having
| a link such that when you click on the link you automatically run IE
| as another user? An example would be great!
|
| Here's the background:
|
| Users typically have an account on two domains: abc and zyx.
|
| The NT username and password are the same on both abc and zyx.
|
| Users on zyx can access a web application that uses NT authentication.
|
| Users on abc can not access the web application - but can access it if
| they create an Explorer desktop icon and use the "Run As" option they
| get when they right click.
|
| (It's a business requirement not to use an icon and the "Run As"
| option.)
|
| Suggestions and tips are appreciated.
|
| If you know of better newsgroups for this question that would helpful
| too.
|
| Thanks.
|

 

[Guest]

runas /noprofile /user:mymachine\administrator "C:\Program Files\Internet
Explorer\iexplore.exe"

The problem is you cannot add the account user password in the script or cmd
line.

When I've used this issue Runas Feature in the past it has worked, but once
you install IE7 you cannot run IE as a different user. IE7 has security
restrictions that causes it to only run under a single instance. There are
registry key's that can be changed to allow this fuctionality but it can
cause major changes to the way windows handles IE.

kevin
--
Kevin Callanan
MSCA 2003, A+, Network+
weblabtechs.blogspot.com

Please let us know if this response was helpful...

 

[bill]

this will probably accomplish what you to do.

google "dropmyrights"

it is a pc mag program to change your rights on a program basis so you
don't get on the net as an administrator.

 

[Anthony Jones]

Is there a way to configure an XP machine so that when it runs IE it
runs it as another user?

Alternatively, can one create either an HTML file or a HTA file having
a link such that when you click on the link you automatically run IE
as another user? An example would be great!

A HTA would need an icon to launch, doesn't that break your 'business
requirement'?

Here's the background:

Users typically have an account on two domains: abc and zyx.

The NT username and password are the same on both abc and zyx.

Users on zyx can access a web application that uses NT authentication.

Users on abc can not access the web application - but can access it if
they create an Explorer desktop icon and use the "Run As" option they
get when they right click.

Two solutions that should work. Have users add the site name to their
Intranet zone. IE will then use the current credentials to logon. Even
though the users are on different domains the credentials (being the same)
should work.

Failing that create a trust relationship between the zyx and abc domains and
grant abc users access to the site. This still requires all users to have
the site recognized by IE as being in the intranet domain.

 

[gimme_this_gimme_that]

No. The HTA would replace the user's default home page and have a link
that calls WScript and then IE.

 

[gimme_this_gimme_that]

Sorry, Intranet Zone?

Thanks for the tip. I'll toss the idea out to the desktop engineers.

 

[Anthony Jones]

No. The HTA would replace the user's default home page and have a link
that calls WScript and then IE.

I didn't realise you could set IEs home page to point to HTA, I'll have to
try that.

BTW, do the users normally launch IE without using an Icon?

 

[Anthony Jones]

Sorry, Intranet Zone?

IE assigns Zones to various types of URL. For example a URL that identifies
the server using only a host name not a fully qualified domain name is
assumed to be the in "Intranet Zone". Whereas most normal sites are
considered to be in the "Internet Zone".

By default the Intranet Zone is has less restrictive security than Internet
Zone.

In particular when an attempt to access a site fails due to access denied
and the site indicates it will accept windows credentials IE will only
attempt to use the current logged on users credentails if the site is in the
Intranet Zone.

 

[gimme_this_gimme_that]

Thanks Anthony,

Right now the are using a version of the site (that's about to be
orphaned) that doesn't use NT authentication.

Test users are using an icon.

 

[Anthony Jones]

Thanks Anthony,

Right now the are using a version of the site (that's about to be
orphaned) that doesn't use NT authentication.

Now your confusing me, what authentication are you using. If none whats the
problem again?

Test users are using an icon.

My question should have come with a . I can't understand a "business
requirement" you mentioned in another post which disallows launching by
Icon. How else are you expecting to launch IE?

 

[gimme_this_gimme_that]

They start IE from the start menu.

Thanks Anthony.