Re: "Run As" from within a user's acct

From: ericB (cyber-fiend@earthlink.net)
Date: 01/05/03 

From: "ericB" <cyber-fiend@earthlink.net>
Date: Sun, 5 Jan 2003 05:07:13 -0800

Besides, if this User is not explicitly denied access to
the directory, then wouldn't he be able to go into the
directory thru "My Computer" & execute the file that way?

ericB
=[ A Fellow Voyager on this JourneyQuest Called -- LIFE ]=

>-----Original Message-----
>I forgot to mention, the executable can be buried within
>a directory to which Users have not access granted (note,
>that does not mean that they are explicitly denied).
>Since the link has the direct path and Users by default
>bypass the traversal checking this should let them see
>the file if it is necessary for the RunAs to bootstrap.
>
>--
>Roger
>"ericB" <cyber-fiend@earthlink.net> wrote in message
>news:046601c2b449$71e60ef0$8ef82ecf@TK2MSFTNGXA04...
>> 1. That's the problem. While in my account, I took
>> ownership of the utility's directory. I denied the
user
>> access to this directory. I placed a shortcut to the
>> utility on the user's desktop. When I log into the
>> user's account & right-click on that shortcut, &
>> select "Run As" I get an error message saying Windows
is
>> searching for the file ...& then "...the referenced
>> file...has been moved or deleted...". 1.
>>
>> 2. RE: Hiding the directory completely: Even if I hid
>> the directory one layer deeper & made the level above
it
>> hidden, if there is no way to prevent the user from
>> enabling "View Hidden Files" in the Internet Options,
>> then that won't work, will it?
>>
>> ericB
>> =[ A Fellow Voyager on this JourneyQuest Called --
LIFE ]=
>>
>>
>> >-----Original Message-----
>> >The RunAs shortcut has to be executable by the user
and
>> you have to use
>> >the profile and user settings of the admin account.
>> >
>> >The invisibility of a folder is determined by its and
>> its parent folder
>> >settings. Try putting the invisible folder one level
>> deeper.
>> >
>> >--
>> >Kent W. England, MS MVP for Windows XP
>> >(Please respond only in the newsgroup)
>> >
>> >
>> >"ericB" <Cyber-Fiend@earthlink.net> wrote in
>> >message news:074301c2b40f$8b5dbac0
>> $d5f82ecf@TK2MSFTNGXA12...
>> >
>> >> I'm the Administrator on a standalone machine. I
have a
>> >> utility program that has to be run from within a
user's
>> >> account. I want to limit access to Administrators
>> only.
>> >> However, I want Administrators to be able to run it
>> from
>> >> within a user's account thru "Run As". I've already
>> >> figured how to make the program's directory
>> inaccessible
>> >> to non-Administrators who try looking at it thru "My
>> >> Computer". But haven't been able to figure out the
>> >> following:
>> >>
>> >> How do I set up a program (which I installed) to:
>> >>
>> >> 1. Be able to be run thru "Run As" from within a
user's
>> >> account?
>> >> 2. Make it's directory not only non accessible to
non-
>> >> Administrators, but invisible?
>> >>
>> >> When I try to run it thru "Run As" now, I get an
error
>> >> saying the link's file is not a valid file.
>> >
>> >.
>> >
>
>
>.
>

Relevant Pages

  • Re: Startup Script from AD policy
    ... and I can't place the executable on the same folder ... >>> permissions ... >>> How can I force the workstations to execute this remote file? ... >> Microsoft MVP Scripting and ADSI ...
    (microsoft.public.windows.server.scripting)
  • Re: Possibly Corrupt Notepad Cant Be Replaced
    ... To execute an EXE in ... that folder you would have to explicitly call the fully qualified path; ... | Windows File Protection didn't complain about moving and then deleting ... | to delete because notepad is in use which may certainly indicate a virus. ...
    (microsoft.public.windowsxp.general)
  • Re: "unable to create the file" "the system cannot find the file specified" (already posted in micro
    ... Make sure the user has Read, Write, Execute, Delete, Change permissions on the folder where the backend DB is located and Read, Write, Execute, Change on the MDB itself. ... Right click in a folder, ... Removing all 8 updates we installed yesterday didn't help. ...
    (microsoft.public.windows.server.setup)
  • Re: cannot delete msinstl.exe virus/trojan
    ... Dump the contents of the IE Temporary Internet Folder cache ... of the McAfee DAT files and if it is a couple of days old, it will download the latest ... Execute; CLEAN.EXE ... It is suggested that you move the report out of c:\mcafee before performing another scan. ...
    (microsoft.public.security.virus)
  • Re: [opensuse] Who said Linux doesnot get Virus infections
    ... and from time to time we all need to execute a clamscan ... - Well I just performed a clamscan and found 4 folder ... Believe it or not eBay goes after ...
    (SuSE)
Loading