runas

[George]

Hi all!

I am trying to run some batch files to restricted users but some operations
as importing registry keys are not able to run correctly as the users are
restricted.
I was playing around with tqcrunas and it is working great but this is just
a trial version.

I was wondering if there is some other application that can enable me to
install things remotely with admin credentials to the restricted users?

I am in mixed nt and 2000 with 2000 workstations. no AD; still on nt domain.

Best regards, George

 

[Dusty Harper {MS}]

Windows comes with the RunAs.exe. you may wish to give it a try

%WinDir%\System32

 

[Karl Levinson [x y] mvp]

You can use the AT command or use Explorer / Network Neighborhood to browse
to the computer and open up the Task Scheduler icon and drag and drop
scheduled task icons there. IIRC, the AT command may not let you choose the
account for the job, so you would then have to go in and right-click on the
task in task scheduler to change the account. I can't remember if dragging
and dropping the task icon copies the account and password over or not, you
might want to check.

You could try also this to allow users to temporarily have admin
permissions:

http://securityadmin.info/faq.htm#runas

However, because of the security implications of that, it might be better to
determine which registry keys / values are modified and change the
permissions on those keys to let the installing user account modify those
keys / values.

There are other solutions as well, such as commercial solutions that let you
push out software by installing a special service on the machine, possibly
using Active Directory for Windows 2000 and assigning packaged applications
to the user or machine, etc.