Re: Using "runas.exe" with automatic password

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 03/10/05 

Date: Thu, 10 Mar 2005 08:53:43 +0100

Hi Marc,

For security reasons runas does not allow you to e.g. script in a password.
If user has a right to run e.g. batch file containing runas then he/she
would be able to see the password.

I don't know what program you are using that is requiring users to be local
administrators. The main question is, what is programs doing that it would
require a local admin permissions? In some cases they only require
additional permissions on hard drive (e.g. in %windir% or some other folder)
or registry. You could try tools like FileMon and RegMon from
www.sysinternals.com (these are free tools) to figure out what is program
trying to do... You could then give users these rights without them being
local administrators.

I hope this helps. 

-- 
Mike
Microsoft MVP - Windows Security
"Marc Hoffman" <mhoffman@morrisprintinggroup.com> wrote in message 
news:BE549B02.7FE1%mhoffman@morrisprintinggroup.com...
> I'm trying to get a program to run as system login with administrative
> privileges without giving the user at the computer admin privileges. 
> Putting
> a "runas" statement in the logon script that gives the program in question
> administrative privileges. However...
>
> ...I can't seem to find a way to add the proper administrative password in
> the runas.exe syntax. When the script is run, it prompts the user for the
> password for the administrative account it is attempting to run as.
> Obviously, we do not want our users to know the administrative passwords. 
> We
> need runas to automatically enter the administrative username and password
> credentials so that the program will run with admin privileges
> transparently, not prompting the user.
>
> Any ideas on this?
>
> Thanks in advance.
>
> Marc
>

Relevant Pages

  • Re: Im new to scripting a I working on a project that I need some help with.
    ... After that the script ... >> that the user account is not valid. ... > it to the Administrators group: ... If the user does not have it, maybe a RunAs solution ...
    (microsoft.public.scripting.vbscript)
  • Re: Defrag of Hard Drive without admin privileges
    ... When you get ready to run Defrag from less than Administrators, ... "shift" key and right mouse the defrag shortcut for a "runas" choice from the ... I am trying to defrag my hard drive without admin privileges. ...
    (microsoft.public.win2000.general)
  • Re: firewall on budget ?
    ... On my local computer when I need to do admin tasks I usually start the ... respective Programs via runas ... Even administrators don't need to create files in C:\ (although ... Windows xp only has preinstalled, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User type
    ... This does help Mike - thanks ... > If the computer is member of domain then you should use domain user ... > After you have this account and group created you can write a short script ... > administrator and make your users local administrators. ...
    (microsoft.public.windows.server.setup)
  • Re: VBScript to verify is user is local admin
    ... I believe the script posted using WMI addresses one complication with the ... the WMI script, only reveal direct membership. ... Administrators group is renamed, ... Dim strUser ...
    (microsoft.public.scripting.vbscript)