runas /savecred - a dirty hack?

[Henning Meyer (remove the numbers)]

Hello *,
I have got some questions about runas:
How does it work (how do I write my own runas)?
Where get the entered login-informations saved if I use /savecred?
How are they protected from the (non-privileged) user? Are the
encrypted? - If, it seems be a symmetric encryption - but where is the
key stored? Why shouldn't my (non-privileged) user get that key and get
my admin-password as plain-text?
Is there a save solution to permit certain users admin-access to
certain-applications (not all) - just like good old unix s-bit?

Thanks for your help...

Henning

 

[Carey Frisch [MVP]]

HOW TO: Enable and Use the "Run As" Command When Running Programs in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;294676&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------------------------------------------


| Hello *,
| I have got some questions about runas:
| How does it work (how do I write my own runas)?
| Where get the entered login-informations saved if I use /savecred?
| How are they protected from the (non-privileged) user? Are the
| encrypted? - If, it seems be a symmetric encryption - but where is the
| key stored? Why shouldn't my (non-privileged) user get that key and get
| my admin-password as plain-text?
| Is there a save solution to permit certain users admin-access to
| certain-applications (not all) - just like good old unix s-bit?
|
| Thanks for your help...
|
| Henning

 

[VIGUY]

Henning,
You may wish to check out the following app for creating a process using
the "runas" while integrating the username/password. Very Slick

http://www.joeware.net/win32/zips/CPAU.zip

or

http://www.joeware.net/win32/index.html

Cheers
VIGUY

 

[Henning Meyer (remove the numbers)]

nice thing...can you make the source available, please ?
Would be great...

What about /savecred (where does the data get stored) ?

Henning

 

[Henning Meyer (remove the numbers)]

Thanks, but I already know how to use it, I just wanted to know how it
works internally...(what system-calls does it use....)

Henning