How does runas work?

Hi,
My application uses CreateProcessAsUser to launch a utility program with
credential of a remote domain(a trusted domain).
The utility does not work. I tried to use "runas" command to launch the same
utility, it works fine.

I used process explorer from sysinternal.com to check utility process's
security.
The process launched from runas has a group named "LOCAL" but the process
launched with CreateProcessAsUser does not have the same group. See image

http://www.laisteps.com/from-runas.jpg

http://www.laisteps.com/from-createprocessasuser.jpg

My question: How can I get the same security group in CreateProcessAsUser()
as runas does?

Thanks,
Chris


.

Relevant Pages

  • Please help: "runas" and CreateProcessAsUser
    ... I tried to use "runas" command to launch the same ... The process launched from runas has a group named "LOCAL" but the process ... launched with CreateProcessAsUser does not have the same group. ... How can I get the same security group in CreateProcessAsUser ...
    (microsoft.public.platformsdk.security)
  • CreateProcessAsUser, error code 6
    ... application is bascially a runas app with a few bells and whistles. ... The CreateProcessAsUser() call succeeds. ... I now have a cmd.exe window open as my user. ... Same user I'm using in the app run by the service. ...
    (microsoft.public.access.security)
  • CreateProcessAsUser, error code 6
    ... application is bascially a runas app with a few bells and whistles. ... The CreateProcessAsUser() call succeeds. ... I now have a cmd.exe window open as my user. ... Same user I'm using in the app run by the service. ...
    (microsoft.public.platformsdk.security)
  • Re: runas /u:username cmd.exe
    ... For example, I am logged into XP Pro as a normal user account, and I launch ... runas /u:administrator cmd.exe ... command line, and want to kill the process and return to the command line, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Interesting behavior of iexplore.exe when using CreateProcessAsUser...
    ... but, in the case of iexplore.exe the process ID returned from CreateProcessAsUser NEVER matches up against the processes if I immediately enumerate the processes running in the system. ... On Vista, if you launch an instance of iexplore.exe with Medium Integrity, it will launch a Low Integrity instance of itself and the Medium Integrity instance will immediately terminate. ... I wonder if I need to tailor the security attributes passed to CreateProcessAsUser. ...
    (microsoft.public.win32.programmer.kernel)