Start application with Adminrights?

[Wrang]

Hi,

i`ve got just one question:
there is one admin-account and 3 restricted useraccounts.
some applications i set up, need adminrights to start.
so, is it possible to set some applications to start from
a restricted account with adminrights without "start
as..." --> Administrator.
The Users should't know the admin-password, but should be
able to start applications which need admin-rights.

thanks
Wrang

P.S. i've got win xp pro, sp1

 

[Mike]

Why don't you create a Power Users group with limited admin rights?

 

[Wrang]

For some Apps you need FULL Admin rights. But if i set
the users (all users should be able to use the same apps)
as "powerusers", the run all the programms with that
rights. and they are able to install new software. and
thats what i dont want.

 

[Bob Huntley]

I have a solution which works (in XP Pro at least.)

Create a shortcut along the line of:

C:\WINDOWS\SYSTEM32\runas.exe /savecred /user:Administrate "C:\Program
Files\Atomtime\ATOMTIME.EXE"

In the example above, "Adminstrate" is the user name of an account with
Admin rights, and Atomtime is the programme to run. The first time that you
run this, you will get a DOS type box asking the Adminstrate account
password. On XP Pro, it remembers the password and you see the DOS box flash
by instantaneously flash by in future runs. XP Home requires you to type the
password into the DOS box each time it is run. Does anyone know of a fix
that allows XP Home to act in the same way?

 

[Doug Knox MS-MVP]

Create a new shortcut to the application, with a command line similar to
this:

RUNAS /USER:ADMINISTRATOR /SAVECRED "C:\Program Files\Some Program\this.exe"

The first time the shortcut run, it will prompt for the Administrator
password. After that, it will use the "saved" credentials.

Open a Command Prompt window and enter RUNAS /? for all the command line
options. However, you may also want to read this article, and look for any
followups to it.

http://archives.neohapsis.com/archives/ntbugtraq/2003-q3/0069.html

I have verified the findings to be correct. This link:
http://tinyurl.com/kk20 has the method for removing the saved credentials,
should you ever find that you need to.

 

[Alexander Grigoriev]

You can allow MODIFY access on the program's folder. For many such programs
it's enough. But I usually just banish them from my computer. I banished ICQ
for this reason.