Run a particular application with admin privilege
in [Windows XP]
|
Prev: Arrange Icons By - THANK YOU
Next: Windows updates
From: JohnSmith1 on 16 Mar 2010 10:15 Hi, How can I make sure that a limited user account can start a particular application with admin prievelege without providing any admin username and password? Around ten users, who have limited account, need to run application for their job but if the application is not run with admin privielege then it does not let the user to benefit from all available options. I don't want to elevate their account to power user or administrator and don't want to provide them with admininstarot password either. Any idea how to resolve this isssue? thanks.
From: John John - MVP on 16 Mar 2010 10:38 JohnSmith1 wrote: > Hi, > > How can I make sure that a limited user account can start a particular > application with admin prievelege without providing any admin username and > password? > > Around ten users, who have limited account, need to run application for > their job but if the application is not run with admin privielege then it > does not let the user to benefit from all available options. I don't want to > elevate their account to power user or administrator and don't want to > provide them with admininstarot password either. > > Any idea how to resolve this isssue? You will have to use third party tools, use one that encrypts the password or else it will be available for all to see if they take a peek at your script or batch file. Some suggestions: http://www.softtreetech.com/24x7/archive/53.htm http://www.schwietz.org/runadminbat/en/ John
From: Pegasus [MVP] on 16 Mar 2010 10:48 "JohnSmith1" <JohnSmith1(a)discussions.microsoft.com> wrote in message news:4F25CE72-4A6D-43EC-A1AB-88D99817841C(a)microsoft.com... > Hi, > > How can I make sure that a limited user account can start a particular > application with admin prievelege without providing any admin username and > password? > > Around ten users, who have limited account, need to run application for > their job but if the application is not run with admin privielege then it > does not let the user to benefit from all available options. I don't want > to > elevate their account to power user or administrator and don't want to > provide them with admininstarot password either. > > Any idea how to resolve this isssue? > > thanks. You could use one of the many "runas" tools, e.g. CPAU from http://www.joeware.net/win/free/tools/cpau.htm. However, you need to be aware that a computer-savvy user can use your process to run his own stuff with elevated privileges, e.g. - By substituting his own program for the one that you want him to use - By working out how you supply the password to "runas" and using it for his own program.
From: spamlet on 16 Mar 2010 16:05 "Pegasus [MVP]" <news(a)microsoft.com> wrote in message news:uw2FMfRxKHA.2644(a)TK2MSFTNGP04.phx.gbl... > > > "JohnSmith1" <JohnSmith1(a)discussions.microsoft.com> wrote in message > news:4F25CE72-4A6D-43EC-A1AB-88D99817841C(a)microsoft.com... >> Hi, >> >> How can I make sure that a limited user account can start a particular >> application with admin prievelege without providing any admin username >> and >> password? >> >> Around ten users, who have limited account, need to run application for >> their job but if the application is not run with admin privielege then it >> does not let the user to benefit from all available options. I don't want >> to >> elevate their account to power user or administrator and don't want to >> provide them with admininstarot password either. >> >> Any idea how to resolve this isssue? >> >> thanks. > > You could use one of the many "runas" tools, e.g. CPAU from > http://www.joeware.net/win/free/tools/cpau.htm. However, you need to be > aware that a computer-savvy user can use your process to run his own stuff > with elevated privileges, e.g. > - By substituting his own program for the one that you want him to use > - By working out how you supply the password to "runas" and using it for > his own program. Couldn't he just add all 'users' to the permissions tab of the prog in question - which would require turning off simple file sharing in XP, and if using XPHome, getting access to the tabs in safe mode. I say this because we had a similar problem with an HP all in one, that only administrators could use. This was because HP had set the permissions at the factory, but because we were using 'simple' file sharing we could not see the permissions tabs and so did not understand why 'users' were being denied access. Once we had access to the tabs, we could give the necessary permissions. (That said I find the whole subject fiddly and am often refused access to things that I have set up as network shares!) S
From: Bruce Chambers on 16 Mar 2010 23:38
JohnSmith1 wrote: > Hi, > > How can I make sure that a limited user account can start a particular > application with admin prievelege without providing any admin username and > password? > > Around ten users, who have limited account, need to run application for > their job but if the application is not run with admin privielege then it > does not let the user to benefit from all available options. I don't want to > elevate their account to power user or administrator and don't want to > provide them with admininstarot password either. > > Any idea how to resolve this isssue? > > thanks. The best way to resolve the problem would be to replace the application with a version that is actually WinXP-compatible. Then you won't need to compromise security for the sake of using yhis legacy application. -- Bruce Chambers Help us help you: http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/default.aspx/kb/555375 They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ~Benjamin Franklin Many people would rather die than think; in fact, most do. ~Bertrand Russell The philosopher has never killed any priests, whereas the priest has killed a great many philosophers. ~ Denis Diderot |