Microsoft Windows Vista Community Forums - Vistaheads
Recommended Download



Welcome to the Microsoft Windows Vista Community Forums - Vistaheads, YOUR Largest Resource for Windows Vista related information.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so , join our community today!

If you have any problems with the registration process or your account login, please contact us.

Driver Scanner

Run As different user

microsoft.public.windows.vista.security






Speedup My PC
Reply
  #1 (permalink)  
Old 11-26-2007
njohn
 

Posts: n/a
Run As different user
When using XP, I was able to run different programs (AD, etc) as a Domain
Admin while logged onto the computer as a Domain User. I did this by holding
the shift key down while right clicking on the program and then selecting
"Run as...". At this point, I would type in the Domain Admin's credentials
and be able to do what I needed to do.
How can I do this in Vista? Whenever I click on the "Run as..." it just
runs the program with elevated rights. I am needing to run it with completely
different credentials altogether.
I have tried getting around this by using the Runas command, but it fails
to open AD because it needs elevated privileges (even when running the
command prompt with elevated privileges).
Any help would be greatly appreciated. Thanks in advance!
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 11-26-2007
James Matthews
 

Posts: n/a
Re: Run As different user
look at windows vista enterpirse

--

http://search.goldwatches.com/?Search=Movado+Watches
http://www.goldwatches.com/
http://www.jewelerslounge.com/
"njohn" <njohn@discussions.microsoft.com> wrote in message
news:8170DD80-9339-4D93-8316-A7328F359C9E@microsoft.com...
> When using XP, I was able to run different programs (AD, etc) as a Domain
> Admin while logged onto the computer as a Domain User. I did this by
> holding
> the shift key down while right clicking on the program and then selecting
> "Run as...". At this point, I would type in the Domain Admin's credentials
> and be able to do what I needed to do.
> How can I do this in Vista? Whenever I click on the "Run as..." it just
> runs the program with elevated rights. I am needing to run it with
> completely
> different credentials altogether.
> I have tried getting around this by using the Runas command, but it fails
> to open AD because it needs elevated privileges (even when running the
> command prompt with elevated privileges).
> Any help would be greatly appreciated. Thanks in advance!


Reply With Quote
  #3 (permalink)  
Old 11-26-2007
njohn
 

Posts: n/a
Re: Run As different user
I am not sure what you mean by that, your post was rather vague.

When looking at Enterprise, what would you like me to see? Does Enterprise
have that capability while the other versions do not? Is there a way to get
that capability in the Business version?


"James Matthews" wrote:

> look at windows vista enterpirse
>
> --
>
> http://search.goldwatches.com/?Search=Movado+Watches
> http://www.goldwatches.com/
> http://www.jewelerslounge.com/
> "njohn" <njohn@discussions.microsoft.com> wrote in message
> news:8170DD80-9339-4D93-8316-A7328F359C9E@microsoft.com...
> > When using XP, I was able to run different programs (AD, etc) as a Domain
> > Admin while logged onto the computer as a Domain User. I did this by
> > holding
> > the shift key down while right clicking on the program and then selecting
> > "Run as...". At this point, I would type in the Domain Admin's credentials
> > and be able to do what I needed to do.
> > How can I do this in Vista? Whenever I click on the "Run as..." it just
> > runs the program with elevated rights. I am needing to run it with
> > completely
> > different credentials altogether.
> > I have tried getting around this by using the Runas command, but it fails
> > to open AD because it needs elevated privileges (even when running the
> > command prompt with elevated privileges).
> > Any help would be greatly appreciated. Thanks in advance!

>

Reply With Quote
  #4 (permalink)  
Old 12-05-2007
Toad
 

Posts: n/a
Re: Run As different user
njohn wrote:

> When using XP, I was able to run different programs (AD, etc) as a
> Domain Admin while logged onto the computer as a Domain User. I did
> this by holding the shift key down while right clicking on the
> program and then selecting "Run as...". At this point, I would type
> in the Domain Admin's credentials and be able to do what I needed to
> do. How can I do this in Vista? Whenever I click on the "Run
> as..." it just runs the program with elevated rights. I am needing to
> run it with completely different credentials altogether.
> I have tried getting around this by using the Runas command, but it
> fails to open AD because it needs elevated privileges (even when
> running the command prompt with elevated privileges).
> Any help would be greatly appreciated. Thanks in advance!


Hi there,

I just got Vista by virtue of a new machine and was playing around with
UAC. Unfortunately, the runas command provided does not elevate rights
as does the Run as Administrator on the contecxt menu just as you
pointed out.

Anyway, I have compiled up shellas.exe which just calls ShellExecute
API with the runas verb as one of the parameters - this isn't different
than in XP.

So, now I can type shellas somecommand in the Run dialog and not have
to find the exe and right click on it... The command will run with
elevated rights as the user you select in the dialog.

I have gone a step further. In XP, I run as a limited user, but once I
log in, I become an administrator, so that I can optionally run
processes that need admin rights as myself and not another user (e.g.
installs). Upon, logoff I am depricated to a limited user again for the
next time.

I have now dome something similar in Vista, but it works subtley
different and isn't really as necessary any more, but works to keep
myself a limited user until I logon (after explorer desktop starts),
then using shellas I am made an administrator, then can run commands
later with elevated rights as myself and not another user; at logoff, I
am removed from the administrators group.

Toad

--


--

Reply With Quote
  #5 (permalink)  
Old 12-05-2007
njohn
 

Posts: n/a
Re: Run As different user
I am glad that you were able to program something around this, but this is
something that should be built in! After all, it is following Microsoft's
guidelines for safe practices in a domain environment. I shouldn't need to
write a program to do something that was not only built into the last several
OS's that were released, but also encouraged by Microsoft. I am holding my
breath to see if SP1 will fix this (in my opinion) integral flaw in Vista.

"Toad" wrote:

> njohn wrote:
>
> > When using XP, I was able to run different programs (AD, etc) as a
> > Domain Admin while logged onto the computer as a Domain User. I did
> > this by holding the shift key down while right clicking on the
> > program and then selecting "Run as...". At this point, I would type
> > in the Domain Admin's credentials and be able to do what I needed to
> > do. How can I do this in Vista? Whenever I click on the "Run
> > as..." it just runs the program with elevated rights. I am needing to
> > run it with completely different credentials altogether.
> > I have tried getting around this by using the Runas command, but it
> > fails to open AD because it needs elevated privileges (even when
> > running the command prompt with elevated privileges).
> > Any help would be greatly appreciated. Thanks in advance!

>
> Hi there,
>
> I just got Vista by virtue of a new machine and was playing around with
> UAC. Unfortunately, the runas command provided does not elevate rights
> as does the Run as Administrator on the contecxt menu just as you
> pointed out.
>
> Anyway, I have compiled up shellas.exe which just calls ShellExecute
> API with the runas verb as one of the parameters - this isn't different
> than in XP.
>
> So, now I can type shellas somecommand in the Run dialog and not have
> to find the exe and right click on it... The command will run with
> elevated rights as the user you select in the dialog.
>
> I have gone a step further. In XP, I run as a limited user, but once I
> log in, I become an administrator, so that I can optionally run
> processes that need admin rights as myself and not another user (e.g.
> installs). Upon, logoff I am depricated to a limited user again for the
> next time.
>
> I have now dome something similar in Vista, but it works subtley
> different and isn't really as necessary any more, but works to keep
> myself a limited user until I logon (after explorer desktop starts),
> then using shellas I am made an administrator, then can run commands
> later with elevated rights as myself and not another user; at logoff, I
> am removed from the administrators group.
>
> Toad
>
> --
>
>
> --
>
>

Reply With Quote
  #6 (permalink)  
Old 12-06-2007
Toad
 

Posts: n/a
Re: Run As different user
njohn wrote:

> I am glad that you were able to program something around this, but
> this is something that should be built in! After all, it is following
> Microsoft's guidelines for safe practices in a domain environment. I
> shouldn't need to write a program to do something that was not only
> built into the last several OS's that were released, but also
> encouraged by Microsoft. I am holding my breath to see if SP1 will
> fix this (in my opinion) integral flaw in Vista.
>
> "Toad" wrote:
>
> > njohn wrote:
> >
> > > When using XP, I was able to run different programs (AD, etc)
> > > as a Domain Admin while logged onto the computer as a Domain
> > > User. I did this by holding the shift key down while right
> > > clicking on the program and then selecting "Run as...". At this
> > > point, I would type in the Domain Admin's credentials and be able
> > > to do what I needed to do. How can I do this in Vista?
> > > Whenever I click on the "Run as..." it just runs the program with
> > > elevated rights. I am needing to run it with completely different
> > > credentials altogether. I have tried getting around this by
> > > using the Runas command, but it fails to open AD because it needs
> > > elevated privileges (even when running the command prompt with
> > > elevated privileges). Any help would be greatly appreciated.
> > > Thanks in advance!

> >
> > Hi there,
> >
> > I just got Vista by virtue of a new machine and was playing around
> > with UAC. Unfortunately, the runas command provided does not
> > elevate rights as does the Run as Administrator on the contecxt
> > menu just as you pointed out.
> >
> > Anyway, I have compiled up shellas.exe which just calls ShellExecute
> > API with the runas verb as one of the parameters - this isn't
> > different than in XP.
> >
> > So, now I can type shellas somecommand in the Run dialog and not
> > have to find the exe and right click on it... The command will run
> > with elevated rights as the user you select in the dialog.
> >
> > I have gone a step further. In XP, I run as a limited user, but
> > once I log in, I become an administrator, so that I can optionally
> > run processes that need admin rights as myself and not another user
> > (e.g. installs). Upon, logoff I am depricated to a limited user
> > again for the next time.
> >
> > I have now dome something similar in Vista, but it works subtley
> > different and isn't really as necessary any more, but works to keep
> > myself a limited user until I logon (after explorer desktop starts),
> > then using shellas I am made an administrator, then can run commands
> > later with elevated rights as myself and not another user; at
> > logoff, I am removed from the administrators group.
> >
> > Toad
> >
> > --
> >
> >
> > --
> >
> >


You can do it with a script as well (available in Vista resource kit).
Basically, it just uses ShellExecute(Ex) API I think also...

I don't think it is an integral flaw. You cannot get elevated rights
without prompting - yes, the OS could provide an EXE just as my shellas
to use from Run or command shell. But, it is trivial to code and I am
sure similar utils are already avaiable on the web. Doing it without
prompting (as XP runas /savecred) is worthless security-wise, although
I did write a much more secure version that can run command aliases
using encrypted user credentials to avoid prompting...

Toad
--

Reply With Quote
  #7 (permalink)  
Old 12-06-2007
njohn
 

Posts: n/a
Re: Run As different user
I think we are talking on two different levels here. I am wanting to run a
program (Active Directory, Group Policy Management, etc) as a Domain Admin
and not with elevated rights. In XP, 2000, and 9x, you could run an
application as a different user by right clicking, selecting Run As, and
typing in the other user's credentials. I have been unable to do this in
Vista. Supposedly I can do this from the command line (but why should I have
to?), but when I try running (runas /userOMAIN\DOMAIN_ADMIN "mmc
%system%\dsa.msc) from the command line, I get an error 740. This is the
problem I am running into. As such, whenever I am wanting to make a change in
Active Directory (which can be several times a day), I am having to remote to
a XP box, then do the RunAs... domain admin. Why did Vista lose this
functionality that is integral to Network Admins?

"Toad" wrote:

> njohn wrote:
>
> > I am glad that you were able to program something around this, but
> > this is something that should be built in! After all, it is following
> > Microsoft's guidelines for safe practices in a domain environment. I
> > shouldn't need to write a program to do something that was not only
> > built into the last several OS's that were released, but also
> > encouraged by Microsoft. I am holding my breath to see if SP1 will
> > fix this (in my opinion) integral flaw in Vista.
> >
> > "Toad" wrote:
> >
> > > njohn wrote:
> > >
> > > > When using XP, I was able to run different programs (AD, etc)
> > > > as a Domain Admin while logged onto the computer as a Domain
> > > > User. I did this by holding the shift key down while right
> > > > clicking on the program and then selecting "Run as...". At this
> > > > point, I would type in the Domain Admin's credentials and be able
> > > > to do what I needed to do. How can I do this in Vista?
> > > > Whenever I click on the "Run as..." it just runs the program with
> > > > elevated rights. I am needing to run it with completely different
> > > > credentials altogether. I have tried getting around this by
> > > > using the Runas command, but it fails to open AD because it needs
> > > > elevated privileges (even when running the command prompt with
> > > > elevated privileges). Any help would be greatly appreciated.
> > > > Thanks in advance!
> > >
> > > Hi there,
> > >
> > > I just got Vista by virtue of a new machine and was playing around
> > > with UAC. Unfortunately, the runas command provided does not
> > > elevate rights as does the Run as Administrator on the contecxt
> > > menu just as you pointed out.
> > >
> > > Anyway, I have compiled up shellas.exe which just calls ShellExecute
> > > API with the runas verb as one of the parameters - this isn't
> > > different than in XP.
> > >
> > > So, now I can type shellas somecommand in the Run dialog and not
> > > have to find the exe and right click on it... The command will run
> > > with elevated rights as the user you select in the dialog.
> > >
> > > I have gone a step further. In XP, I run as a limited user, but
> > > once I log in, I become an administrator, so that I can optionally
> > > run processes that need admin rights as myself and not another user
> > > (e.g. installs). Upon, logoff I am depricated to a limited user
> > > again for the next time.
> > >
> > > I have now dome something similar in Vista, but it works subtley
> > > different and isn't really as necessary any more, but works to keep
> > > myself a limited user until I logon (after explorer desktop starts),
> > > then using shellas I am made an administrator, then can run commands
> > > later with elevated rights as myself and not another user; at
> > > logoff, I am removed from the administrators group.
> > >
> > > Toad
> > >
> > > --
> > >
> > >
> > > --
> > >
> > >

>
> You can do it with a script as well (available in Vista resource kit).
> Basically, it just uses ShellExecute(Ex) API I think also...
>
> I don't think it is an integral flaw. You cannot get elevated rights
> without prompting - yes, the OS could provide an EXE just as my shellas
> to use from Run or command shell. But, it is trivial to code and I am
> sure similar utils are already avaiable on the web. Doing it without
> prompting (as XP runas /savecred) is worthless security-wise, although
> I did write a much more secure version that can run command aliases
> using encrypted user credentials to avoid prompting...
>
> Toad
> --
>
>

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
New user want to run apps Harm7 microsoft.public.windows.vista.administration accounts passwords 2 12-31-2007 00:26
Getting An Application to run on a standard user account djclfc microsoft.public.windows.vista.administration accounts passwords 0 09-24-2007 17:00
How do I tell User control to allow my program to run without a wi King300 microsoft.public.windows.vista.security 1 07-13-2007 01:12
How to run a program as another user? giant microsoft.public.windows.vista.general 1 06-03-2007 13:09
C&C 3 Will Not run under a user account John Harris microsoft.public.windows.vista.games 5 04-03-2007 21:21




All times are GMT +1. The time now is 14:11.




Driver Scanner - Free Scan Now

Vistaheads.com is part of the Heads Network. See also XPHeads.com , Win7Heads.com and Win8Heads.com.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.6.0 RC 2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120