Re: Escalation of privilege

From: Buz [MSFT] (buzb_at_online.microsoft.com)
Date: 12/29/03 

Date: Mon, 29 Dec 2003 15:38:51 -0500

Have you looked into using RunAs?

HOW TO: Enable and Use the "Run As" Command When Running Programs in Windows
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q294676

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

"Nicolas Macarez" <macarez@free.fr> wrote in message
news:OPkBxXQrDHA.3504@TK2MSFTNGP11.phx.gbl...
> Hi Everyone
> I am working on a Windows 2000 Professional desktop (no domain controller,
> no Active Directory, everything is local).
>
> When a user, without any admin rights, logs on, a logon script is
executed.
> This VB script (WSH and WMI stuff) modifies some registry keys and entries
> under HKEY_CURRENT_USER and I need to run this script with the admin
> rights - otherwise certain entries are not modified because the users
doen't
> have the right to do so.
>
> How can I escalate the privilege INSIDE my script, and then release the
> rights afterwards, once the session is opened ?
>
> Help greatly appreciated !
>
> Nicolas
>
>

Relevant Pages

  • Re: Escalation of privilege
    ... access to the registry keys they need access to ... ... > This VB script modifies some registry keys and entries ... > rights - otherwise certain entries are not modified because the users ...
    (microsoft.public.security)
  • Escalation of privilege
    ... When a user, without any admin rights, logs on, a logon script is executed. ... This VB script modifies some registry keys and entries ...
    (microsoft.public.security)
  • Escalation of privilege
    ... When a user, without any admin rights, logs on, a logon script is executed. ... This VB script modifies some registry keys and entries ...
    (microsoft.public.win2000.security)
  • Re: Create New User and Home Directory
    ... The script can be modified to create home directories for existing users. ... program that modifies profilePath for users linked here: ... and assign them rights? ... The script assigns values for home directory, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Escalation of privilege
    ... This isn't really possible without knowledge of an admin password so not ... > This VB script modifies some registry keys and entries ... > rights - otherwise certain entries are not modified because the users ...
    (microsoft.public.win2000.security)