Re: Help with RunAs

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 03/18/03


From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Tue, 18 Mar 2003 07:13:28 -0700


for msc files you need to name them as input to mmc
runas /savecred /profile "mmc full-pathname.msc"

-- 
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Sandra L Miller" <slm@cs.arizona.edu> wrote in message news:3E7653FC.D004670C@cs.arizona.edu...
> Hi, Roger,
> 
> I was able to get your suggestion about using
>   runas /profile /savecred /u:desiredaccount "what was there before"
> to work fine for shortcuts to .exe's, but not to .msc's.  Have you
> been successful using it for .msc's (like dsa.msc)?
> 
> Sandy
> 
> "Roger Abell [MVP]" wrote:
> > 
> > "Sandra L Miller" <slm@cs.arizona.edu> wrote in message news:3E726E26.B0C7BE18@cs.arizona.edu...
> > > I run a number of programs each day using RunAs to run the program
> > > as a domain administrator (e.g., running Active Directory Users and
> > > Computers while logged on to my Workstation with my non-administrative
> > > account).
> > >
> > > On the popup window, there is the choice to run as the current user,
> > > or "The following user:".  Under the second choice, the default is
> > > LocalMachine\Administrator, and even though there is a drop down list
> > > arrow, that is the only choice.  There is also a box with ... in it
> > > (like a browse choice), but it is grayed out.  There is no account on
> > > the local machine called Administrator, since I have changed the name
> > > of the administrator account to something else.  Also, every time I
> > > use RunAs, I want to run as a domain administrator.
> > >
> > > Is there any way to either change the default to the domain
> > > administrator account, or include the domain administrator account
> > > in the drop down list as a choice?
> > >
> > > Thanks for any help,
> > > Sandy
> > >
> > > --
> > > Sandra L Miller
> > > Department of Computer Science
> > > University of Arizona
> > 
> > Hi Sandy,
> > 
> > Did you change the Administrator account name using
> > the local security policy to rename Administrator or via
> > a simple rename ?
> > 
> > The droplist is populated with the membership of the
> > local Administrators group.  You could try explicitly
> > adding your domain admin account as a member of
> > the local Administrators group.
> > 
> > You might find use of the /savecred switch more convenient
> > in the long run.  One can create a shortcut to the desired app,
> > such as to dsa.msc.  Then, one edits the shortcut to modify
> > the target of the shortcut to be
> > runas /profile /savecred /u:desiredaccount "what was there before"
> > (use of /profile is optional)
> > The first time the shortcut is used you will be prompted for
> > the password.  Thereafter the old password will be retrieved
> > from safe storage and used, and this will work transparently
> > for you until the account has a change of password.
> > 
> > --
> > Roger (at ASU)
> 
> -- 
> Sandra L Miller
> Department of Computer Science
> University of Arizona
> 
> "The opinions or statements expressed herein are my
> own and should not be taken as a position, opinion,
> or endorsement of the University of Arizona."


Relevant Pages

  • Re: Help with RunAs
    ... >> of the administrator account to something else. ... I want to run as a domain administrator. ... One can create a shortcut to the desired app, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with RunAs
    ... >>> I run a number of programs each day using RunAs to run the program ... >>> of the administrator account to something else. ... One can create a shortcut to the desired app, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing users program access.
    ... Its obviously looking for command line parameters. ... shortcut from the Administrator account to the other profiles, ... I have placed a shortcut to the programs .exe ...
    (microsoft.public.windowsxp.security_admin)
  • RunAs Admin - Access denied for CD!
    ... Users group, figuring that anything I needed to do for ... administration I can do using the "RunAs" feature. ... dummy Administrator account belonging to no groups. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with RunAs
    ... > the local machine called Administrator, since I have changed the name ... > of the administrator account to something else. ... I want to run as a domain administrator. ... One can create a shortcut to the desired app, ...
    (microsoft.public.windowsxp.security_admin)