Re: Save Credentials not working (File Sharing)

It, /SAVECRED for runas, is a huge security hole, because it doesn't just apply to that one instance. Any later use of RunAs won't require a matching password for the RunAs username.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:%234aLFUBqGHA.1796@xxxxxxxxxxxxxxxxxxxxxxx


In news:eGKev$$pGHA.3908@xxxxxxxxxxxxxxxxxxxx,
clintster <clintster@xxxxxxxxxxxxx> typed:
Hi

I would like to setup a batch file to automaticallly map a drive on
my work domain laptop to my home workgroup computer. I don't want to
add a password in the batch file (security reasons) and was trying
the savecred option in net use but after disconnecting the mapped
drive, when I try map again it again asks for my username and
password.
Thanks
Clinton

I've never tried using savecred, but I thought it was used for runas only
(and I've heard it's a huge security hole).
However, take a look at http://support.microsoft.com/?kbid=287536 .


.

Relevant Pages

  • Re: Restricted User Group
    ... When you use runas the restricted identity is added to your security token. ... permissions in case you do not as the account you are logged on with. ... > entity in many of the registry ACLs. ...
    (microsoft.public.windows.server.security)
  • [NT] RunAs Sensitive Data Exposure
    ... RunAs Sensitive Data Exposure ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... it possible for an attacker to read another user's credentials. ... Microsoft has decided to include the fix within service pack 3. ...
    (Securiteam)
  • Re: RUNAS+.exe
    ... Different RunAs products listed here, some free and some not, some ... You may also want to check out PolicyMaker Application Security ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.scripting.vbscript)