Re: Who running IE with "run as"?

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 10/30/04


Date: Sat, 30 Oct 2004 15:45:25 -0400

DanC wrote:
> It needed to connect an Oracle based website.
> It only workes with administrator rights.
>
> It works now by using a shortcut to IEplore.exe with 'run as'
> But the user has to use an local adminstrator password and also
> select a link in the favorites.
> There must be a nicer and saver way like just clicking on a icon.
> Isn't it?
>
> DanC

Well, I have to say I'm puzzled, because if this is entirely web-based, the
permissions can't just have something to do with the permissions on
iexplore.exe. Perhaps you need to adjust the permissons on
files/folders/registry settings on the workstation to see how to allow
normal users to run this app. FileMon and RegMon from www.sysinternals.com
should help.

I know of no native way to get run as to cache the credentials other than
using, say, a batch file, and they wouldn't be transparent to the user, and
users shouldn't need admin rights to run properly written apps anyway - if
the app doesn't allow it, modify the places it insists on writing to.



Relevant Pages

  • Re: Who running IE with "run as"?
    ... It must be possible to configure an shortcut so it run with some rights so ... >> It only workes with administrator rights. ... > permissions can't just have something to do with the permissions on ... > the app doesn't allow it, modify the places it insists on writing to. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Run As function
    ... The best solution is to change the ACLing on what the app ... All ways of force-feeding adm credentials so as to run the ... > I have an application that automatically updates its self and those ... > updates only work if it has administrator rights. ...
    (microsoft.public.win2000.general)
  • Re: Run As function
    ... The best solution is to change the ACLing on what the app ... All ways of force-feeding adm credentials so as to run the ... > I have an application that automatically updates its self and those ... > updates only work if it has administrator rights. ...
    (microsoft.public.win2000.security)
  • Re: Need help configuring delegate authority for department administra
    ... I was hoping to allow our departmental IT person the ability to load software on client machines by creating an ID with elevated ADMIN like permissions for just the subset of computers that are assigned to this department. ... As soon as you need to have your user be able to install software on the machine, he/she needs to have full administrator rights. ... I'd be also helpful if you provided your reasons why this IT person should *not* be given standard-Administrator access to the machine. ...
    (microsoft.public.windows.group_policy)
  • Re: Rights for a DBA
    ... I am not an SQL guy:(but you can use utilities such as subinacl or setacl ... to change permissions on a service. ... > not give him Administrator rights to the Windows 2000 server itself. ...
    (microsoft.public.windows.server.security)