RunAs

From: martin (gremagehan_at_web.de)
Date: 06/12/05

  • Next message: Jitendra Kalyankar: "E-Mail gateway on IIS." 
    To: focus-ms@securityfocus.com
Date: Sun, 12 Jun 2005 11:54:54 +0200

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Hello,

    maybe I'm not understand the runas-feature, but it is not following the same?
    1.1) login as Admin
    1.2) double-click on some App
    2) call some Application as following: "runas /user:Administrator
    <application.exe>

    I have W2K for workstations. I can create a new user with admin privilegs but
    I don't see howto restrict some rights (e.g. my admin2 should be able to
    install new applications but he should not be able create a new user)
    Int is possible?

    Thanks in advice
    Martin
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.2 (GNU/Linux)

    iD8DBQFCrAaj9w5olJf0Oq8RAhj2AJwLcU07wUpiIFnv/W8cVIlRc5w+ZACfRrAF
    MzW60F6u1reG/2Lxd8IOaiU=
    =V3Wf
    -----END PGP SIGNATURE-----

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Jitendra Kalyankar: "E-Mail gateway on IIS."

    Relevant Pages

    • Re: getting me ducks in a row - concepts
      ... Don't create local login accounts for users, ... >> admin types know the local administrator credentials on all PCs. ... You don't load QB on the server - the registry keys or files/folders would ...
      (microsoft.public.windows.server.sbs)
    • Re: XP & W2K server User rights need help
      ... before did not install the apps as admin. ... >behaved app. ... >> server non of the users had accounts only the computers ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Administrator Logon to 1 DC only
      ... Okay, no, I am past the limiting admin privileges.... ... Over the weekend I am going to create another DC on VMware Server and then ... app on the DC i.e. making them members of the Builtin administrators group. ... leaving 3rd party app on its own or vice versa. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Manifests and requestedExecutionLevel
      ... The existing app is a single executable, ... Since you already have the small .exe running, ... And Admin user priviledge is High MIC. ... The manifest has the capability of telling Vista that it needs to be started ...
      (microsoft.public.vc.mfc)
    • Re: BYPASS privilege !!
      ... demarkation between OS Admins and App Admins, ... less simple to stop a Sys Admin from messing with the App (again, ... under/over/around/through the same security. ... Equally obvious, to a user with BYPASS privilege, it matters not how ...
      (comp.os.vms)