scanning without Admin rights?

[Uwe Kaerst]

Dear all,

we have an Epson flatbed scanner attached to an XP-SP2 box. The scanner
software starts only with Admin rights, when doubleclicked by normal
users it closes immediately.
Is there a way to allow users to use the scanner without making them all
admins?

TIA,
Uwe

--
Uwe Kaerst, Ph.D.
Dept. Cell Biology
HZI - helmholtz Centr for Infection Research
Inhoffenstrasse 7
D-38124 Braunschweig, Germany

Tel: +(49) 531 61813010
Fax: +(49) 531 2612313

EMAIL: kaerst(replace this with an at)helmholtz-hzi.de

 

[Alec S.]

Uwe Kaerst wrote (in

we have an Epson flatbed scanner attached to an XP-SP2 box. The scanner
software starts only with Admin rights, when doubleclicked by normal
users it closes immediately.
Is there a way to allow users to use the scanner without making them all

admins?

One option is to create a new shortcut and set it to the following command:

runas /user:ADMIN /savecred NOTEPAD.EXE

Replace ADMIN with an admin accountname and NOTEPAD.EXE with the scanner
program. The first time you run it, you will need to enter the admin password,
but afterwards it should save it. This way you can run the app elevated without
exposing the admin password to the user in any reasonably determinable way or
having to manually enter it every time.

You can then set the icon of the shortcut to the icon in the scanner program’s
EXE (or whatever else you want).

Also consider creating a dedicated admin account for just this purpose (for
programs that need to run elevated) rather than using the primary admin account.
That way you can reduce the account’s permissions and make it safer.


HTH

 

[Uwe Kaerst]

HI Alec,

thank you very much for your tipps. I will try the first one, the second
one is not possible - we're in an AD, and domain login is required.

regards,
Uwe

Uwe Kaerst wrote (in
admins?

One option is to create a new shortcut and set it to the following
command:

runas /user:ADMIN /savecred NOTEPAD.EXE

Replace ADMIN with an admin accountname and NOTEPAD.EXE with the
scanner program. The first time you run it, you will need to enter the
admin password, but afterwards it should save it. This way you can run
the app elevated without exposing the admin password to the user in
any reasonably determinable way or having to manually enter it every
time.

You can then set the icon of the shortcut to the icon in the scanner
program’s EXE (or whatever else you want).

Also consider creating a dedicated admin account for just this purpose
(for programs that need to run elevated) rather than using the primary
admin account. That way you can reduce the account’s permissions and
make it safer.


HTH

--
Uwe Kaerst, Ph.D.
Dept. Cell Biology
HZI - helmholtz Centr for Infection Research
Inhoffenstrasse 7
D-38124 Braunschweig, Germany

Tel: +(49) 531 61813010
Fax: +(49) 531 2612313

EMAIL: kaerst(replace this with an at)helmholtz-hzi.de