Re: "Run As" from within a user's acct

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 01/05/03 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Sun, 5 Jan 2003 00:20:21 -0700

I would have to experiment with this, but with the
Users having access to the shortcut, and Read on
the executable if necessary, but only Administrators
having Execute on the executable . . . 

--
Roger
"ericB" <cyber-fiend@earthlink.net> wrote in message
news:046601c2b449$71e60ef0$8ef82ecf@TK2MSFTNGXA04...
> 1.  That's the problem.  While in my account, I took
> ownership of the utility's directory.  I denied the user
> access to this directory.  I placed a shortcut to the
> utility on the user's desktop.  When I log into the
> user's account & right-click on that shortcut, &
> select "Run As" I get an error message saying Windows is
> searching for the file ...& then "...the referenced
> file...has been moved or deleted...". 1.
>
> 2.  RE: Hiding the directory completely:  Even if I hid
> the directory one layer deeper & made the level above it
> hidden, if there is no way to prevent the user from
> enabling "View Hidden Files" in the Internet Options,
> then that won't work, will it?
>
> ericB
> =[ A Fellow Voyager on this JourneyQuest Called -- LIFE ]=
>
>
> >-----Original Message-----
> >The RunAs shortcut has to be executable by the user and
> you have to use
> >the profile and user settings of the admin account.
> >
> >The invisibility of a folder is determined by its and
> its parent folder
> >settings. Try putting the invisible folder one level
> deeper.
> >
> >--
> >Kent W. England, MS MVP for Windows XP
> >(Please respond only in the newsgroup)
> >
> >
> >"ericB" <Cyber-Fiend@earthlink.net> wrote in
> >message news:074301c2b40f$8b5dbac0
> $d5f82ecf@TK2MSFTNGXA12...
> >
> >> I'm the Administrator on a standalone machine. I have a
> >> utility program that has to be run from within a user's
> >> account.  I want to limit access to Administrators
> only.
> >> However, I want Administrators to be able to run it
> from
> >> within a user's account thru "Run As".  I've already
> >> figured how to make the program's directory
> inaccessible
> >> to non-Administrators who try looking at it thru "My
> >> Computer".  But haven't been able to figure out the
> >> following:
> >>
> >> How do I set up a program (which I installed) to:
> >>
> >> 1. Be able to be run thru "Run As" from within a user's
> >> account?
> >> 2. Make it's directory not only non accessible to non-
> >> Administrators, but invisible?
> >>
> >> When I try to run it thru "Run As" now, I get an error
> >> saying the link's file is not a valid file.
> >
> >.
> >

Relevant Pages

  • Re: Programs wont work in Limited User Accounts
    ... users Administrators rights ... change, the shortcut would work for the other useras normal, but it ... the asp.net is windows own network account. ... >seemed to double install some start up programs. ...
    (microsoft.public.windowsxp.general)
  • Re: "Run As" from within a users acct
    ... While in my account, I took ... I placed a shortcut to the ... its parent folder ... I want to limit access to Administrators ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event ID: 1202
    ... No mapping between account names and security IDs was ... SeIncreaseBasePriorityPrivilege = Administrators ... "Meinolf Weber" wrote: ... A user account in one or more Group policy objects (GPOs) could not ...
    (microsoft.public.win2000.active_directory)
  • Re: Rid AD of Circular Group Membership
    ... I'll try to keep this going; because it might be useful to another admin ... The quess is each has an account and uses it, ... part of stations) into the machine local Administrators group. ... Administrators Group has a members: ...
    (microsoft.public.windows.group_policy)
  • Re: Event ID: 1202
    ... No mapping between account names and security IDs was done. ... User Rights configuration completed with error. ... SeIncreaseBasePriorityPrivilege = Administrators ... unresolvable account exists only in one GPO. ...
    (microsoft.public.win2000.active_directory)