Re: Run as In Windows 2003

Tech-Archive recommends: Fix windows errors by optimizing your registry

On Jan 14, 10:45 am, Andrew Meador <amead...@xxxxxxxxxxx> wrote:
On Jan 14, 10:26 am, todd <t...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Is there away that i can make a program always run in administrator With out
asking.  I have one program that can only run under administrator.  The
people that need to get it, i do not want to have administrator rights.  And
i
do not want to give them the password to the administrator account.

   I do not know the security risk of doing this (as I don't know how
how or where the password is stored) but, you can create a .bat file.
   Setup that .bat file to call the runas command with these
parameters:

   /savecred /user:<a username here that has local admin permissions>
AppPathAndName

   I would setup an account with local administrative access that is
not the actual administrator account. Anyway, use runas /? to see
exact structure for username format, etc.... Then, setup a link for
the app that calls this .bat file. It will ask for the password when
they run the app the first time, so you enter it for them that first
time, but after that the password is cached somewhere (thus the
potential security risk) so they will not need to have the password
themselves to run the app.

   Hope this helps!

Andrew

Oh yeah, you might want to tweak the permissions on this .bat file
so they can read/execute, but not modify, so they can't change which
app the .bat file runs, otherwise they could find the .bat file, and
modify the app to run with admin permissions. That could be bad. ;)
Maybe modify the permissions on the app shortcut to the .bat so they
can only execute, so they don't know what is going as far as that it
is running the .bat file. Use echo off in the .bat to hide the text
from showing on screen when it runs, make the .bat file hidden, etc...
You get my point, make it hard for them to get to the .bat file and
modify it.

Andrew
.

Relevant Pages

  • Re: Philly-To-London via Intranet?
    ... which gets downloaded/updated automagically by a .BAT file. ... program so that you'd put it in the PROGRAMS folder, ... By putting your app in the PROGRAMS ... administrator to change the default permissions on the folder where ...
    (comp.databases.ms-access)
  • Re: Run as In Windows 2003
    ... people that need to get it, i do not want to have administrator rights. ... how or where the password is stored) but, you can create a .bat file. ... I would setup an account with local administrative access that is ... the app that calls this .bat file. ...
    (microsoft.public.windows.server.general)
  • Re: admin setting for "ran as" without needing admin password
    ... If you use the /SAVECRED switch, it will apply to all programs on the computer not just one. ... this exposes the Administrator password for anyone that can open the BAT file in Notepad. ... MS-MVP Windows Media Center\Windows Powered Smart Display ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Logging off with batch job running
    ... and normally I use Runas to run the bat file as ... Administrator while logged in as a different user. ... batch job using vbs while logged in as Administrator can I log off leaving ... the batch job running in the background or will it kill the job? ...
    (microsoft.public.windowsxp.general)
  • Re: .bat files
    ... I have to open a .bat file. ... I right clicked it and chose "Run as administrator" ... Tim Slattery ...
    (microsoft.public.windows.vista.general)