Where are RunAs MRUs?

[NickC]

Anyone know where XP Pro stores the MRUs for right-click->RunAs? I
inadvertently typed the wrong user name once, and now it always comes
up as the first entry which means I have to scroll down and select the
correct one instead of just tabbing to the password field.

A regedit search didn't bring it up. Lots of MRUs, esp for Run (win-
R), but not the RunAs one.

Thanks,

 

[glee]

Clear unwanted Open With entries
http://windowsxp.mvps.org/OpenWith.htm

 

[NickC]

glee wrote on 06 Oct 2007:

Clear unwanted Open With entries
http://windowsxp.mvps.org/OpenWith.htm

Thanks, but that's not the problem. Maybe I'm using the wrong
terminology when I say "MRU".

When I use a file manager to view applications, right click on one of
the entries, and choose to run the application using Run As, a dialog
box appears asking with which credentials to run the app. It used to
be prefilled with my admin user name (which is not 'administrator',
although that account exists), but it now appears with a list of a
couple of choices after I once typed another user name. Since this is
'learned' behaviour, the system must be storing the values to fill the
drop down box somewhere, I assume the registry. I would like to remove
one of the entries (so that I don't have to choose a user name, instead
the one that I always used previously is pre-filled so that I can just
tab to the password field).

Thanks,

 

[glee]

Sorry....I misread (or read too fast). Your post was clear, it was just my reading
that was defective.

I do not know where that info is stored, and have not turned up anything from
searching. If I discover the answer, I'll post back.

 

[NickC]

glee wrote on 07 Oct 2007:

I do not know where that info is stored, and have not turned up
anything from searching. If I discover the answer, I'll post
back.

Thanks. I've searched pretty extensively and have managed to convince
myself they are either stored: not in plain text, or by a UID linked
somewhere else to a name (although I have searched through all my user
ID numbers, which makes me wonder if it's a link to a link to a link),
or under a key that is not normally readable by a user.

Or perhaps it isn't stored in the registry at all.

I suppose if it was stored in a way that is easy to access, it would be
trivially easy for an attacker to discover all users that have admin
privileges.

 

[WTC]

glee wrote on 06 Oct 2007:


Thanks, but that's not the problem. Maybe I'm using the wrong
terminology when I say "MRU".

When I use a file manager to view applications, right click on one of
the entries, and choose to run the application using Run As, a dialog
box appears asking with which credentials to run the app. It used to
be prefilled with my admin user name (which is not 'administrator',
although that account exists), but it now appears with a list of a
couple of choices after I once typed another user name. Since this
is 'learned' behaviour, the system must be storing the values to fill
the drop down box somewhere, I assume the registry. I would like to
remove one of the entries (so that I don't have to choose a user
name, instead the one that I always used previously is pre-filled so
that I can just tab to the password field).

Thanks,

Hi NickC,

Create a shortcut for the application you would like start with another
user and put the following in the path shortcut.

runas /user:UserName "c:\path\appname.exe"