Hi there,

I need to run a script using "runas" command since my logged on users are
non administrators on the local machine.

Is there any available tool "runas" that is considered secure enough to be
used and applied as a group policy-logon script ? I am currently enconding a
..vbs script but obviously that is a very weak protection. I would like a
'runas' tool that is protected by password.

I don't know of an answer to your question but if a script can be run as a computer
startup script, then it runs in system context and users can have permissions removed
from the script so that they can not view it in sysvol as long as domain computers
has permissions to the script. --- Steve

"Marlon Brown" wrote in message
news:O0BAzXBPEHA.1516@TK2MSFTNGP12.phx.gbl...
> Hi there,
>
> I need to run a script using "runas" command since my logged on users are
> non administrators on the local machine.
>
> Is there any available tool "runas" that is considered secure enough to be
> used and applied as a group policy-logon script ? I am currently enconding a
> .vbs script but obviously that is a very weak protection. I would like a
> 'runas' tool that is protected by password.
>
>

Unfortunately in my case the installer needs to perform several functions
that rely on full network access - what usually cannot be accomplished via
startup scripts.

"Steven L Umbach" wrote in message
news:0J5qc.15247$qA.1867649@attbi_s51...
> I don't know of an answer to your question but if a script can be run as a
computer
> startup script, then it runs in system context and users can have
permissions removed
> from the script so that they can not view it in sysvol as long as domain
computers
> has permissions to the script. --- Steve
>
> "Marlon Brown" wrote in message
> news:O0BAzXBPEHA.1516@TK2MSFTNGP12.phx.gbl...
> > Hi there,
> >
> > I need to run a script using "runas" command since my logged on users
are
> > non administrators on the local machine.
> >
> > Is there any available tool "runas" that is considered secure enough to
be
> > used and applied as a group policy-logon script ? I am currently
enconding a
> > .vbs script but obviously that is a very weak protection. I would like a
> > 'runas' tool that is protected by password.
> >
> >
>
>

You'd have to hard-code a password in your script. Users could possibly get
the password.

Starting a process remotely with WMI or the task scheduler might be another
option if the script doesn't need to be run in the users' contexts.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


"Marlon Brown" wrote in message
news:O0BAzXBPEHA.1516@TK2MSFTNGP12.phx.gbl...
> Hi there,
>
> I need to run a script using "runas" command since my logged on users are
> non administrators on the local machine.
>
> Is there any available tool "runas" that is considered secure enough to be
> used and applied as a group policy-logon script ? I am currently enconding
a
> .vbs script but obviously that is a very weak protection. I would like a
> 'runas' tool that is protected by password.
>
>