Re: Help with RunAs

From: Sandra L Miller (slm@cs.arizona.edu)
Date: 03/18/03


Date: Mon, 17 Mar 2003 16:02:20 -0700
From: Sandra L Miller <slm@cs.arizona.edu>
To: mvpNOSPAM@asu.edu


Hi, Roger,

I was able to get your suggestion about using
  runas /profile /savecred /u:desiredaccount "what was there before"
to work fine for shortcuts to .exe's, but not to .msc's. Have you
been successful using it for .msc's (like dsa.msc)?

Sandy

"Roger Abell [MVP]" wrote:
>
> "Sandra L Miller" <slm@cs.arizona.edu> wrote in message news:3E726E26.B0C7BE18@cs.arizona.edu...
> > I run a number of programs each day using RunAs to run the program
> > as a domain administrator (e.g., running Active Directory Users and
> > Computers while logged on to my Workstation with my non-administrative
> > account).
> >
> > On the popup window, there is the choice to run as the current user,
> > or "The following user:". Under the second choice, the default is
> > LocalMachine\Administrator, and even though there is a drop down list
> > arrow, that is the only choice. There is also a box with ... in it
> > (like a browse choice), but it is grayed out. There is no account on
> > the local machine called Administrator, since I have changed the name
> > of the administrator account to something else. Also, every time I
> > use RunAs, I want to run as a domain administrator.
> >
> > Is there any way to either change the default to the domain
> > administrator account, or include the domain administrator account
> > in the drop down list as a choice?
> >
> > Thanks for any help,
> > Sandy
> >
> > --
> > Sandra L Miller
> > Department of Computer Science
> > University of Arizona
>
> Hi Sandy,
>
> Did you change the Administrator account name using
> the local security policy to rename Administrator or via
> a simple rename ?
>
> The droplist is populated with the membership of the
> local Administrators group. You could try explicitly
> adding your domain admin account as a member of
> the local Administrators group.
>
> You might find use of the /savecred switch more convenient
> in the long run. One can create a shortcut to the desired app,
> such as to dsa.msc. Then, one edits the shortcut to modify
> the target of the shortcut to be
> runas /profile /savecred /u:desiredaccount "what was there before"
> (use of /profile is optional)
> The first time the shortcut is used you will be prompted for
> the password. Thereafter the old password will be retrieved
> from safe storage and used, and this will work transparently
> for you until the account has a change of password.
>
> --
> Roger (at ASU)

-- 
Sandra L Miller
Department of Computer Science
University of Arizona
"The opinions or statements expressed herein are my
own and should not be taken as a position, opinion,
or endorsement of the University of Arizona."


Relevant Pages

  • Re: Help with RunAs
    ... >>> I run a number of programs each day using RunAs to run the program ... >>> of the administrator account to something else. ... One can create a shortcut to the desired app, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with RunAs
    ... >>> I run a number of programs each day using RunAs to run the program ... >>> of the administrator account to something else. ... One can create a shortcut to the desired app, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing users program access.
    ... Its obviously looking for command line parameters. ... shortcut from the Administrator account to the other profiles, ... I have placed a shortcut to the programs .exe ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with RunAs
    ... > the local machine called Administrator, since I have changed the name ... > of the administrator account to something else. ... I want to run as a domain administrator. ... One can create a shortcut to the desired app, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Domain Administrator Locked out
    ... the built-in Administrator account. ... > with domain administrator account.it is locked out after ... > sometime.But if i try to athenticate domain administrator ... > login even if administrator is locked out. ...
    (microsoft.public.win2000.active_directory)