Re: enable "runas" under account, without log into workstations ?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: mmac (no_at_thank.you)
Date: 11/20/04 

Date: Fri, 19 Nov 2004 19:55:55 -0800

I got the following in response to a similar problem, hope it helps.

1. Click Start / Control Panel / User Accounts / Create a New Account /
     Name the Account: "able2play" (without quotes) / Next Pick: "Computer-
     Administrator" & Click "Create Account";

2. Click on your new able2run account and Create a Password for it;

3. When your limited user wants to run a program that requires
Administrator
    privileges they can Right-Click the shortcut to that program / Click Run
As... /
    "The Following User": able2run and enter the password. Simple as that!

I know what you're thinking: That defeats the purpose of the limited user
account.
To secure the "able2run" account so that it can't be used to logon to the
computer:

First you can hide the account so that it won't show up on the Welcome
Screen:
http://www.dougknox.com/xp/scripts_desc/xp_hide_users.htm (thanks Doug!)

Next add a shortcut to the windows logoff routine into the RUN key of the
able2run registry.
This is a one shot attempt that must be done from within the account.
Once done you can't gain access to the account again so get it right the
first time

4. Logon to the "able2run" account,

5. Click Start / Run / regedt32 / browse to:
    [HKCU\SOFTWARE\ Microsoft\Windows\CurrentVersion\Run] and
    Click Edit / New / String value / ValueName: logoff / Value data: logoff

>From now on, if anyone logs on with the "able2run" account, the computer
will log
them off immediately. They will not gain access to an administrators
desktop! :-)

"Hernán Castelo" <bajopalabra@hotmail.com> wrote in message
news:u48577ozEHA.2636@TK2MSFTNGP11.phx.gbl...
> hi
> i need to set up an account
> just for execute an .exe vía "RunAs" command
> but preventing to start windows
> with that account on the network
>
> its possible ?
>
> --
> atte,
> Hernán Castelo
> SGA - UTN - FRBA
>
>

Relevant Pages

  • Disabling logon
    ... A better way to keep someone from logging on with the account might be the ... I believe in Windows 2000 "Local Security Policy" may be referred to as ... > Next add a shortcut to the windows logoff routine into the RUN key of the ... They will not gain access to an administrators ...
    (microsoft.public.windows.server.networking)
  • Re: Disabling logon
    ... probably better than modifying the registry directly. ... >A better way to keep someone from logging on with the account might be the ... >> Next add a shortcut to the windows logoff routine into the RUN key of the ... They will not gain access to an administrators ...
    (microsoft.public.windows.server.networking)
  • Re: enable "runas" under account, without log into workstations ?
    ... item 1 states that you create the account as an admin. ... > the credentials for able2run and then add the users account to the local ... > administrators group. ...
    (microsoft.public.windows.server.networking)
  • Re: Excerpt from PayPal Developer Centre
    ... official and provides a paypal link watch where your browser actually ... It now has a feature to verify you are at a valid ebay site. ... trying to gain access to your account right now too. ...
    (borland.public.delphi.non-technical)
  • Re: Administrative account access
    ... > I accidently deleted all user's in Windows XP Prof.. ... > I can not gain access into Windows. ... its states account does not exist. ... > Windows from the DOS prompt or can this be done by using ...
    (microsoft.public.windowsxp.security_admin)