• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Password with runas.exe

Haden

Senior member
To start program under certan user rights I use runas.exe. However my idea isn't to run Admin right'ed program from user enviroment, vice versus.
I work under Administrator enviroment, programs which can couse security problems (IE, ftp severs) I start under simple users rights, so even if they go totally mad they can't couse any harm (all partitions NTFS with rights set).

BUT... I have to supply password every time I start program, even if it's blank it takes Enter click. Does anyone know other utility which would support
something like /password:xxx or way to force it under runas.exe?
 
Anyone?
Maybe I should clearify question or smth.

Is there any util which can start programs with different permissions than the user's current logon provides and supports password parameter (so I don't need to type password every time, if I create shortcut (example: runas.exe /user:UserName "C:\program files\program.exe" would ask for password if executed )).
 
Good work Haden and thanks for sharing your findings (especially since you received no help on this).

Comments/Questions:

1) Security of ADMIN password is dependant on its internal encryption (hope its good)!

2) Nice and single file!

3) Seems kind of co$tly, especially if its only for convenience sake!

4) Does it do exactly what you wanted?
 
I'm happy with it's features, also because I use it to start programs with user rights only, I just specify /pw parameter in shortcut (this user has no access from network so password security doesn't matter actually).
When I saw how much it costs I was shocked 😉, it's just a small utility after all.
I wrote letter to see maybe there is/will be a lite version.
 
If you are experienced with Visual Basic or Windows Scripting you can use a COM object to do this. Check out the SFImpersonator ActiveX object. Just register it using regsvr32 and you can run a script to execute code under the security context of another user. You can also compile the password in a VB exe, or encode the password in a script to hide it.
 
Which OS and under what circumstances? In WinXP (when NOT joined to a domain and with fast user switching enabled), I'd just use fast user switching to accomplish the same (approximately) thing, running "risky" apps from the restricted user account and switching back and forth between accounts while working. Just thought I'd add that in case that possibility might have a limited application for some users.

- Collin
 
Back
Top