RE: runas vs network connections etc etc....

From: Derick Anderson (danderson_at_vikus.com)
Date: 09/12/05

  • Next message: Murad Talukdar: "RE: runas vs network connections etc etc...." 
    Date: Mon, 12 Sep 2005 12:14:51 -0400
To: <focus-ms@securityfocus.com>

     
    > -----Original Message-----
    > From: Murad Talukdar [mailto:talukdar_m@subway.com]
    > Sent: Monday, September 12, 2005 1:42 AM
    > To: focus-ms@securityfocus.com
    > Subject: runas vs network connections etc etc....
    >
    > Hi all,
    > I have been trying to work out how to runas admin for several
    > different special folders eg network connections and printers
    > and faxes etc and following the advice about opening separate
    > processes given here;
    > http://blogs.msdn.com/aaron_margosis/archive/2004/07/07/175488.aspx
    > have found it a workaround.
    > Is this ideal? As far as I can see it works.
    > What do others do to get privileges when needed for these
    > essentials? This can be a real problem when it comes to
    > troubleshooting users machines and this is the best 'fix' I
    > have come across.
    >
    > Kind Regards
    > Murad Talukdar

    I do RunAs of IE for non-Admin Tools/MMC stuff which lets me do nearly
    everything I want to pretty easily. The only hard part is Scheduled
    Tasks: it seems to use some convoluted GUID-filled path (see the
    shortcut target for it) rather than being an actual executable. It looks
    like this:

    %SystemRoot%\explorer.exe [bunch of crap]

    So I take [bunch of crap] and put it in IE's address bar and I get
    Scheduled Tasks. That took me a bit to figure out.

    I've not found anything that can't be RunAs'ed so far but there are some
    gotchas and programs that won't run from the command line using runas so
    you have to get creative. And if I'm doing something mission critical or
    fixing a time-sensitive problem, I log in as Administrator to prevent
    frustration and mistakes.

    Derick Anderson

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Murad Talukdar: "RE: runas vs network connections etc etc...."

    Relevant Pages

    • RE: runas vs network connections etc etc....
      ... Same thing applies to printers and faxes and network connections. ... of crap just looks different. ... I'm trying to setup a bunch of these as .cmd files so that I can chuck them ... runas vs network connections etc etc.... ...
      (Focus-Microsoft)
    • Re: I want to limit who can login to specific computers .-
      ... Correct that will stop cross network connections, won't stop runas though. ... Joe Richards Microsoft MVP Windows Server Directory Services ... That can be easily done in the user's account properties in ADUC. ...
      (microsoft.public.windows.server.active_directory)
    • RE: runas vs network connections etc etc....
      ... For Network Connections, another alternative is to add the non-admin to ... the "Network Configuration Operators" group. ... runas vs network connections etc etc.... ...
      (Focus-Microsoft)