Urgent: Do an EWF Commit under limited User session

[YaronM]

Hi All,

I'm strugling with a problem that I can't solve..
I've using EWF-RAM (SP1) and would like to be able to run a command/script
to commit the overlay changes.
all that while being logged-in using a limited-user account.
I tried to user a RunAs cmd tool that will launch ewfmgr c: -commit but it
says "unable to open the target device \\:\c:"
I also tried creating a VB tool using EWFDll1.dll from xpefiles.com but no
luck also.

is it even possible to commit under user login (w/ or w/o admin
credentials)?
does it fail because the ewf data is saved in the administrator registry
hive and it is not available in the user-session?

thanks,

YaronM

 

[Slobodan Brcin \(eMVP\)]

Hi Yaron,

commit operation has nothing to do with registry. It only requires access to ewf driver so it can be told to commit overlay.
Runas with admin privileges should work (I have never tried it though).

You always have a choice of writing simple service that will allow you indirect access to EWF driver from any user account if that
is what you wish.

Regards,
Slobodan

 

[Guest]

Yaron,

I ran into this problem also and it was a nightmare. I ended up writing some
code in our application that allows a process to be run as administrator. I
had to also grant the administrator special privelges. Let me know if you
want the source code and details about setting the special privelges to
administrator.

tim

 

[Guest]

there is also a utility out there "cpau" that works if you can use a utility.

tim

 

[YaronM]

Hi Tim,

I would be happy to receive the source code. please send it to: yaronmaor
at gmail dot com
by the way, I found another cool freeware tool that recompiles executeable
to be ran using specific user+password credentials.
unfortuanly it didn't worked for me on this occasion bringing a (87) error..
??
you should try it also: http://www.palmersoft.co.uk/runasuser.htm

thanks again,

YaronM

 

[YaronM]

Hi Tim,

I would be happy to receive the source code. please send it to: yaronmaor
at gmail dot com
by the way, I found another cool freeware tool that recompiles executeable
to be ran using specific user+password credentials.
unfortuanly it didn't worked for me on this occasion bringing a (87) error..
??
you should try it also: http://www.palmersoft.co.uk/runasuser.htm

thanks again,

YaronM

 

[Guest]

Yaron,

you can write a serivce or a dll registered under
HKLM\software\microsoft\windowsnt\currentversion\winlogon\notify.

regards
sankar