Re: Temporary user rights

From: Mark Strelecki, ACP (be6-506@nospam.strelecki.com)
Date: 05/14/02 

From: " Mark Strelecki, ACP" <be6-506@nospam.strelecki.com>
Date: Mon, 13 May 2002 20:51:29 -0400

Turn off real-time monitoring, or deactivate temporarily McAfee software. 

--
Mark Strelecki,  ACP          BE6.2600.011208c
Computing and Programming Since 1975  http://www.strelecki.com
Protect Your Rights -- Fight UCITA   http://www.4cite.org
"Asheesh Laroia" <pan-news@asheeshenterprises.com> wrote in message
news:RQUD8.73675$qU1.17100889@typhoon.nyroc.rr.com...
> Surely, McAfee can allow certain programs, can't it?
>
> Anyway, if you'd rather, you can recompile it avoid McAfee noticing it.
> You are using ERunAs2X, not ERunAsX, right?  I do know that ERunAsX is
> detected as an exploit, but I didn't know that ERunAs2X was in the
> database as well.
>
> This seems an awful waste to such an elegant solution to the problem.
>
> -- Asheesh.
>
> On Mon, 13 May 2002 15:36:11 -0400, Aaron N. Cutshall wrote:
>
> > Asheesh,
> >
> > McAfee Anti-Virus would not let me use this program because it
> > identified it as a security "exploit".  I guess that I'll have to find
> > other means.
> >
> > Aaron
> >
> > "Aaron N. Cutshall" <acutshall@elsallc.com> wrote in message
> > news:#5K0EvC#BHA.1916@tkmsftngp04...
> >> That merits investigation.  I appreciate you passing it on.
> >>
> >> Aaron
> >>
> >> "Asheesh Laroia" <pan-news@asheeshenterprises.com> wrote in message
> >> news:KUCC8.38409$2G1.13304764@typhoon.nyroc.rr.com...
> >> > In the logon script:
> >> >
> >> > (Extract ERunAs2X from debploit, found at
> >> > http://www.anticracking.sk/EliCZ/bugs/DebPloit.zip)
> >> >
> >> > erunas2x <command>
> >> >
> >> > That will run the <command> with local SYSTEM privileges.  <command>
> >> > should be the time-update command you were going to put in the script
> >> > that
> >> > needs to run as local SYSTEM.
> >> >
> >> > This is considered a bug by some, but MS hasn't responded to it in
> >> > the months for which it has been available, so maybe they consider it
> >> > a feature.  If they do release an update that breaks it, then this
> >> > will fail then.  The only other methods of which I know involve
> >> > putting a local Administrator password in a world-readable file that
> >> > is read by the script, passed to WinNT's RunAs program.
> >> >
> >> > -- Asheesh.
> >> >
> >> > On Thu, 09 May 2002 16:07:17 -0400, Aaron N. Cutshall wrote:
> >> >
> >> > > I would like to temporarily change a user's rights to allow a user
> >> > > to update the system time on the local workstation to match the
> >> > > server, then remove the privilege to prevent tampering.  This would
> >> > > normally be
> >> > > executed during the user's login script.  How can I execute
> >> > > something with temporary administrative privileges?
> >>
> >>

Relevant Pages

  • Re: Temporary user rights
    ... Anyway, if you'd rather, you can recompile it avoid McAfee noticing it. ... You are using ERunAs2X, not ERunAsX, right? ...
    (microsoft.public.win2000.security)
  • Re: Cant Switch user on XP anymore
    ... Once in Safe Mode, then what??? ... >Boot the computer into Safe Mode. ... Also you may want to turn off Script blocking in McAfee, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem with email generated from VB.NET using Outlook
    ... I got the user to turn off "scriptstopper" in McAfee to see if the problem ... She also runs MS Anti Spyware so I turned that ... I am only familiar with Norton Antivirus. ... I think script blocking possibly has ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Conflict Between McAffee and ACT
    ... You should post this at the McAfee Support Forum: ... > For those not familiar with the product, ACT is a contact ... you will need to disable the Hawk Script Stopper ...
    (microsoft.public.security.virus)
  • Re: OT: Microsoft extends XP again, sort-of
    ... I don't use Cox's McAfee suite because I've used McAffee products before and find them far inferior to even Norton. ... My second install on a different machine resulted in much the same effect. ... But I've noted it loads ever so slowly and like I said, with all the improvements its still susceptible to any fifth rate script kiddy. ...
    (rec.food.cooking)