SU.EXE /SP4 for Windows 2000

[CB]

Hello,

When we installed the Service Pack 4 on the Windows Servers 2000, the
Service SU doesn't function correctly for the simple users. SU.EXE
functions correctly with the administrators.

We noticed that SU.EXE tries to write in repertory C:\WINNT\SYSTEM32
when we start SU with a logon simple user and in C:\Documents and
setting\logonAdm\ when it's a logon administrator. Why isn't it
identical?

Is SU.EXE supported by Microsoft? We made many research and it doesn't
seem to hace of special version for Windows 2000. We use version
5.0.2195.2097, we believe this the last version. Before the
installation of SP4, all functioned correctly. We must used SP4 for
the safety of the system.

Several people have to suggest us using RUNAS in Windows 2000. The
problem of this tool is that it doesn't allow to pass of the password
in parameter. We cannot authorise the users to have the password of a
logon administrator and we wish that work is carried out in BATCH
mode, therefore the seizure with the keyboard is impossible.

Is there a solution so that SU.EXE coexists with SP4 for Windows 2000?

Thank you for your assistance.

 

[Ian Barber]

Hello,

When we installed the Service Pack 4 on the Windows Servers 2000, the
Service SU doesn't function correctly for the simple users. SU.EXE
functions correctly with the administrators.

We noticed that SU.EXE tries to write in repertory C:\WINNT\SYSTEM32
when we start SU with a logon simple user and in C:\Documents and
setting\logonAdm\ when it's a logon administrator. Why isn't it
identical?

Is SU.EXE supported by Microsoft? We made many research and it doesn't
seem to hace of special version for Windows 2000. We use version
5.0.2195.2097, we believe this the last version. Before the
installation of SP4, all functioned correctly. We must used SP4 for
the safety of the system.

Several people have to suggest us using RUNAS in Windows 2000. The
problem of this tool is that it doesn't allow to pass of the password
in parameter. We cannot authorise the users to have the password of a
logon administrator and we wish that work is carried out in BATCH
mode, therefore the seizure with the keyboard is impossible.

Is there a solution so that SU.EXE coexists with SP4 for Windows 2000?

Thank you for your assistance.

To get SU.exe to work after installing SP4, you need to make a change
to the local security policy.

Open the Local Security Settings applet from Administrative tools and
then open the Local Policies folder and the User Rights Assignment
folder. There is a new policy, called Impersonate a client after
authentication. Double click this and then assign the users/groups
that will be running SU to this. SU will then work as before.