Is there a way to configure an application shortcut so it will
automatically run as a predefined user with a predefined password with
out any interaction from the user.

I have an application that automatically updates its self and those
updates only work if it has administrator rights. But I don't want the
users to have administrator rights so I want just that program to have
administrator rights. I know how to do it manually with the run as
dialog but I don't want the users to have to type in a password and I
don't want them to even know the password.

Chris W

See the link below on how to use runas in a script if that will help but note that
curious user may be able to read the admin credentials if they go looking. Another
possibility is if you can schedule the task with the AT command that runs in system
context and therefore may not need credentials. --- Steve

http://www.jsiinc.com/SUBO/tip7100/rh7111.htm
http://support.microsoft.com/default.aspx?scid=kb;en-us;313565 -- At command.

"Chris W" <605586080XYZ@cox.net.removeXYZ> wrote in message
news:P2Xfc.15688$fq4.7436@lakeread05...
> Is there a way to configure an application shortcut so it will
> automatically run as a predefined user with a predefined password with
> out any interaction from the user.
>
> I have an application that automatically updates its self and those
> updates only work if it has administrator rights. But I don't want the
> users to have administrator rights so I want just that program to have
> administrator rights. I know how to do it manually with the run as
> dialog but I don't want the users to have to type in a password and I
> don't want them to even know the password.
>
> Chris W
>

You can use sanur.exe if you're prepared to accept the
obvious security risk. http://www.commandline.co.uk/sanur/.


"Chris W" <605586080XYZ@cox.net.removeXYZ> wrote in message
news:P2Xfc.15688$fq4.7436@lakeread05...
> Is there a way to configure an application shortcut so it will
> automatically run as a predefined user with a predefined password with
> out any interaction from the user.
>
> I have an application that automatically updates its self and those
> updates only work if it has administrator rights. But I don't want the
> users to have administrator rights so I want just that program to have
> administrator rights. I know how to do it manually with the run as
> dialog but I don't want the users to have to type in a password and I
> don't want them to even know the password.
>
> Chris W
>

Chris W wrote:
> Is there a way to configure an application shortcut so it will
> automatically run as a predefined user with a predefined password with
> out any interaction from the user.
>
> I have an application that automatically updates its self and those
> updates only work if it has administrator rights. But I don't want
> the users to have administrator rights so I want just that program to
> have administrator rights. I know how to do it manually with the run
> as dialog but I don't want the users to have to type in a password
> and I don't want them to even know the password.
>
> Chris W

would this help any?

http://www.jsiinc.com/SUBG/TIP3200/rh3292.htm


--
Steve Parry BA (Hons) MCP MVP

http://www.gwynfryn.co.uk

The best solution is to change the ACLing on what the app
is modifying so that change is granted to Users group.
All ways of force-feeding adm credentials so as to run the
app as adm in the user's context have issues with that user
being able to access (or try as they are able) those creds.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Chris W" <605586080XYZ@cox.net.removeXYZ> wrote in message
news:P2Xfc.15688$fq4.7436@lakeread05...
> Is there a way to configure an application shortcut so it will
> automatically run as a predefined user with a predefined password with
> out any interaction from the user.
>
> I have an application that automatically updates its self and those
> updates only work if it has administrator rights. But I don't want the
> users to have administrator rights so I want just that program to have
> administrator rights. I know how to do it manually with the run as
> dialog but I don't want the users to have to type in a password and I
> don't want them to even know the password.
>
> Chris W
>

Chris W wrote:
> Is there a way to configure an application shortcut so it will
> automatically run as a predefined user with a predefined password with
> out any interaction from the user.
>
> I have an application that automatically updates its self and those
> updates only work if it has administrator rights. But I don't want the
> users to have administrator rights so I want just that program to have
> administrator rights. I know how to do it manually with the run as
> dialog but I don't want the users to have to type in a password and I
> don't want them to even know the password.

A very good but expensive solution would be to have your programmers
modify that app so that part of it runs as a service (under the LOCAL
SYSTEM context), and that part would handle the updating.

--
luc wastiaux