Re: Elevate user rights versus RunAs



Wes wrote:

Is there any way that I can temporarily elevate a user's
rights/memberships? I have an app that requires each user to have admin
rights to properly execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the
user account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be
performed. Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights
to a user for a specific period of time (Ex. 1hr or until logoff).

You are describing the ever-useful sudo in *nix operating systems. Windows
doesn't have the equivalent, although there are a few third-party apps such
as WinSudo (which I haven't tried).

However, Microsoft's Aaron Margosis's MakeMeAdmin might work for you:

http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!
.



Relevant Pages

  • Re: Admin rights
    ... >> We have an app here at work that will only run as a user with admin ... >> the user admin rights is the best solution. ... >> My question is other then scripting RunAs with VBscript to run the ...
    (microsoft.public.windowsxp.general)
  • Re: Administering IIS on XP
    ... developing requires access to parts of the OS that only an Admin can reach. ... > it would be a good idea to remove the user from the local admins group to ... > Is there anyway of giving the user rights to access the IIS MMC? ... > option maybe to look into a 3rd party app or utility that prevents the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin rights
    ... >>> We have an app here at work that will only run as a user with admin ... >>> the user admin rights is the best solution. ... >>> My question is other then scripting RunAs with VBscript to run the ...
    (microsoft.public.windowsxp.general)
  • Re: XP & W2K server User rights need help
    ... before did not install the apps as admin. ... >behaved app. ... >> server non of the users had accounts only the computers ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator Logon to 1 DC only
    ... Okay, no, I am past the limiting admin privileges.... ... Over the weekend I am going to create another DC on VMware Server and then ... app on the DC i.e. making them members of the Builtin administrators group. ... leaving 3rd party app on its own or vice versa. ...
    (microsoft.public.windows.server.active_directory)