![]() |
![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
|
Welcome to Vista Forums we are your forum for Windows Vista help and discussion. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
br> br> |
| |||||||
|
| | Thread Tools | Display Modes |
| | #1 (permalink) |
| Guest | Run as instead of Run as Adminstrator Hello, Local admins only get the option to "Run as Admin" when using right-click, which uses the account with admin rights they are logged in with. How can we enable them to choose an alternative domain account with priviledges for like running Exchange or AD admin tools on administrative workstations? Thx! Cheers |
My System Specs![]() |
| | #2 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Use runas executable from the command prompt. -- Joe Richards Microsoft MVP Windows Server Directory Services Author of O'Reilly Active Directory Third Edition www.joeware.net ---O'Reilly Active Directory Third Edition now available--- http://www.joeware.net/win/ad3e.htm workinghard@news.postalias wrote: > Hello, > > Local admins only get the option to "Run as Admin" when using right-click, > which uses the account with admin rights they are logged in with. How can we > enable them to choose an alternative domain account with priviledges for > like running Exchange or AD admin tools on administrative workstations? > > Thx! > > Cheers > > |
My System Specs![]() |
| | #3 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Yes, sure that works, making custom shortcuts etc ... but is there any way to add it to the contect menu using the registry a lot of folks would appreciate that. Cheers "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... > Use runas executable from the command prompt. > > -- > Joe Richards Microsoft MVP Windows Server Directory Services > Author of O'Reilly Active Directory Third Edition > www.joeware.net > > > ---O'Reilly Active Directory Third Edition now available--- > > http://www.joeware.net/win/ad3e.htm > > > workinghard@news.postalias wrote: >> Hello, >> >> Local admins only get the option to "Run as Admin" when using >> right-click, which uses the account with admin rights they are logged in >> with. How can we enable them to choose an alternative domain account with >> priviledges for like running Exchange or AD admin tools on administrative >> workstations? >> >> Thx! >> >> Cheers |
My System Specs![]() |
| | #4 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Not that I am aware of. -- Joe Richards Microsoft MVP Windows Server Directory Services Author of O'Reilly Active Directory Third Edition www.joeware.net ---O'Reilly Active Directory Third Edition now available--- http://www.joeware.net/win/ad3e.htm workinghard@news.postalias wrote: > Yes, sure that works, making custom shortcuts etc ... but is there any way > to add it to the contect menu using the registry a lot of folks would > appreciate that. > > Cheers > > > "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message > news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... >> Use runas executable from the command prompt. >> >> -- >> Joe Richards Microsoft MVP Windows Server Directory Services >> Author of O'Reilly Active Directory Third Edition >> www.joeware.net >> >> >> ---O'Reilly Active Directory Third Edition now available--- >> >> http://www.joeware.net/win/ad3e.htm >> >> >> workinghard@news.postalias wrote: >>> Hello, >>> >>> Local admins only get the option to "Run as Admin" when using >>> right-click, which uses the account with admin rights they are logged in >>> with. How can we enable them to choose an alternative domain account with >>> priviledges for like running Exchange or AD admin tools on administrative >>> workstations? >>> >>> Thx! >>> >>> Cheers > > |
My System Specs![]() |
| | #5 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Actually, there is, sort of. I wrote a couple of shell add-ons for the old command prompt here to get an elevated command prompt. The same process can be used here. If you export this to a reg file and import it, you will get a Run As this app on the context menu for executables Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\exefile\shell\cRunas] @="Run As this app" [HKEY_CLASSES_ROOT\exefile\shell\cRunas\command] @="runas.exe /user:ant\\jesperAD \"%1\"" If you want the old command prompt here, you import this file: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\Directory\shell\CmdHere] @="Command Prompt Here" [HKEY_CLASSES_ROOT\Directory\shell\CmdHere\command] @="cmd.exe /k cd \"%1\"" Both of these will be running with the normal token for that user. In other words, if you runas an admin in admin approval mode, you get a low admin token. To get an elevated token you would need an app that can elevate arbitrary processes on the command line. I wrote one of those for the Windows Vista Security book, but it is not quite ready for prime time yet. "Joe Richards [MVP]" wrote: > Not that I am aware of. > > -- > Joe Richards Microsoft MVP Windows Server Directory Services > Author of O'Reilly Active Directory Third Edition > www.joeware.net > > > ---O'Reilly Active Directory Third Edition now available--- > > http://www.joeware.net/win/ad3e.htm > > > workinghard@news.postalias wrote: > > Yes, sure that works, making custom shortcuts etc ... but is there any way > > to add it to the contect menu using the registry a lot of folks would > > appreciate that. > > > > Cheers > > > > > > "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message > > news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... > >> Use runas executable from the command prompt. > >> > >> -- > >> Joe Richards Microsoft MVP Windows Server Directory Services > >> Author of O'Reilly Active Directory Third Edition > >> www.joeware.net > >> > >> > >> ---O'Reilly Active Directory Third Edition now available--- > >> > >> http://www.joeware.net/win/ad3e.htm > >> > >> > >> workinghard@news.postalias wrote: > >>> Hello, > >>> > >>> Local admins only get the option to "Run as Admin" when using > >>> right-click, which uses the account with admin rights they are logged in > >>> with. How can we enable them to choose an alternative domain account with > >>> priviledges for like running Exchange or AD admin tools on administrative > >>> workstations? > >>> > >>> Thx! > >>> > >>> Cheers > > > > > |
My System Specs![]() |
| | #6 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Shoulda mentioned that you need to hard-code the username in there, and remove the one I put in which is a dummy test account. "Jesper" wrote: > Actually, there is, sort of. I wrote a couple of shell add-ons for the old > command prompt here to get an elevated command prompt. The same process can > be used here. If you export this to a reg file and import it, you will get a > Run As this app on the context menu for executables > Windows Registry Editor Version 5.00 > > [HKEY_CLASSES_ROOT\exefile\shell\cRunas] > @="Run As this app" > > [HKEY_CLASSES_ROOT\exefile\shell\cRunas\command] > @="runas.exe /user:ant\\jesperAD \"%1\"" > > If you want the old command prompt here, you import this file: > Windows Registry Editor Version 5.00 > > [HKEY_CLASSES_ROOT\Directory\shell\CmdHere] > @="Command Prompt Here" > > [HKEY_CLASSES_ROOT\Directory\shell\CmdHere\command] > @="cmd.exe /k cd \"%1\"" > > Both of these will be running with the normal token for that user. In other > words, if you runas an admin in admin approval mode, you get a low admin > token. To get an elevated token you would need an app that can elevate > arbitrary processes on the command line. I wrote one of those for the Windows > Vista Security book, but it is not quite ready for prime time yet. > > "Joe Richards [MVP]" wrote: > > > Not that I am aware of. > > > > -- > > Joe Richards Microsoft MVP Windows Server Directory Services > > Author of O'Reilly Active Directory Third Edition > > www.joeware.net > > > > > > ---O'Reilly Active Directory Third Edition now available--- > > > > http://www.joeware.net/win/ad3e.htm > > > > > > workinghard@news.postalias wrote: > > > Yes, sure that works, making custom shortcuts etc ... but is there any way > > > to add it to the contect menu using the registry a lot of folks would > > > appreciate that. > > > > > > Cheers > > > > > > > > > "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message > > > news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... > > >> Use runas executable from the command prompt. > > >> > > >> -- > > >> Joe Richards Microsoft MVP Windows Server Directory Services > > >> Author of O'Reilly Active Directory Third Edition > > >> www.joeware.net > > >> > > >> > > >> ---O'Reilly Active Directory Third Edition now available--- > > >> > > >> http://www.joeware.net/win/ad3e.htm > > >> > > >> > > >> workinghard@news.postalias wrote: > > >>> Hello, > > >>> > > >>> Local admins only get the option to "Run as Admin" when using > > >>> right-click, which uses the account with admin rights they are logged in > > >>> with. How can we enable them to choose an alternative domain account with > > >>> priviledges for like running Exchange or AD admin tools on administrative > > >>> workstations? > > >>> > > >>> Thx! > > >>> > > >>> Cheers > > > > > > > > |
My System Specs![]() |
| | #7 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Certainly an option but I would way go for using the cmd prompt and running runas there. Likely I could start up an admin tool faster that way then someone could do it via the GUI anyway. ![]() -- Joe Richards Microsoft MVP Windows Server Directory Services Author of O'Reilly Active Directory Third Edition www.joeware.net ---O'Reilly Active Directory Third Edition now available--- http://www.joeware.net/win/ad3e.htm Jesper wrote: > Shoulda mentioned that you need to hard-code the username in there, and > remove the one I put in which is a dummy test account. > > "Jesper" wrote: > >> Actually, there is, sort of. I wrote a couple of shell add-ons for the old >> command prompt here to get an elevated command prompt. The same process can >> be used here. If you export this to a reg file and import it, you will get a >> Run As this app on the context menu for executables >> Windows Registry Editor Version 5.00 >> >> [HKEY_CLASSES_ROOT\exefile\shell\cRunas] >> @="Run As this app" >> >> [HKEY_CLASSES_ROOT\exefile\shell\cRunas\command] >> @="runas.exe /user:ant\\jesperAD \"%1\"" >> >> If you want the old command prompt here, you import this file: >> Windows Registry Editor Version 5.00 >> >> [HKEY_CLASSES_ROOT\Directory\shell\CmdHere] >> @="Command Prompt Here" >> >> [HKEY_CLASSES_ROOT\Directory\shell\CmdHere\command] >> @="cmd.exe /k cd \"%1\"" >> >> Both of these will be running with the normal token for that user. In other >> words, if you runas an admin in admin approval mode, you get a low admin >> token. To get an elevated token you would need an app that can elevate >> arbitrary processes on the command line. I wrote one of those for the Windows >> Vista Security book, but it is not quite ready for prime time yet. >> >> "Joe Richards [MVP]" wrote: >> >>> Not that I am aware of. >>> >>> -- >>> Joe Richards Microsoft MVP Windows Server Directory Services >>> Author of O'Reilly Active Directory Third Edition >>> www.joeware.net >>> >>> >>> ---O'Reilly Active Directory Third Edition now available--- >>> >>> http://www.joeware.net/win/ad3e.htm >>> >>> >>> workinghard@news.postalias wrote: >>>> Yes, sure that works, making custom shortcuts etc ... but is there any way >>>> to add it to the contect menu using the registry a lot of folks would >>>> appreciate that. >>>> >>>> Cheers >>>> >>>> >>>> "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message >>>> news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... >>>>> Use runas executable from the command prompt. >>>>> >>>>> -- >>>>> Joe Richards Microsoft MVP Windows Server Directory Services >>>>> Author of O'Reilly Active Directory Third Edition >>>>> www.joeware.net >>>>> >>>>> >>>>> ---O'Reilly Active Directory Third Edition now available--- >>>>> >>>>> http://www.joeware.net/win/ad3e.htm >>>>> >>>>> >>>>> workinghard@news.postalias wrote: >>>>>> Hello, >>>>>> >>>>>> Local admins only get the option to "Run as Admin" when using >>>>>> right-click, which uses the account with admin rights they are logged in >>>>>> with. How can we enable them to choose an alternative domain account with >>>>>> priviledges for like running Exchange or AD admin tools on administrative >>>>>> workstations? >>>>>> >>>>>> Thx! >>>>>> >>>>>> Cheers >>>> |
My System Specs![]() |
| | #8 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator No doubt an elevated command prompt is far faster when you need to run several tasks. That's why I liked the idea of being able to right-click a folder and open an elevated command prompt there. "Joe Richards [MVP]" wrote: > Certainly an option but I would way go for using the cmd prompt and > running runas there. Likely I could start up an admin tool faster that > way then someone could do it via the GUI anyway. ![]() > > > -- > Joe Richards Microsoft MVP Windows Server Directory Services > Author of O'Reilly Active Directory Third Edition > www.joeware.net > > > ---O'Reilly Active Directory Third Edition now available--- > > http://www.joeware.net/win/ad3e.htm > > > Jesper wrote: > > Shoulda mentioned that you need to hard-code the username in there, and > > remove the one I put in which is a dummy test account. > > > > "Jesper" wrote: > > > >> Actually, there is, sort of. I wrote a couple of shell add-ons for the old > >> command prompt here to get an elevated command prompt. The same process can > >> be used here. If you export this to a reg file and import it, you will get a > >> Run As this app on the context menu for executables > >> Windows Registry Editor Version 5.00 > >> > >> [HKEY_CLASSES_ROOT\exefile\shell\cRunas] > >> @="Run As this app" > >> > >> [HKEY_CLASSES_ROOT\exefile\shell\cRunas\command] > >> @="runas.exe /user:ant\\jesperAD \"%1\"" > >> > >> If you want the old command prompt here, you import this file: > >> Windows Registry Editor Version 5.00 > >> > >> [HKEY_CLASSES_ROOT\Directory\shell\CmdHere] > >> @="Command Prompt Here" > >> > >> [HKEY_CLASSES_ROOT\Directory\shell\CmdHere\command] > >> @="cmd.exe /k cd \"%1\"" > >> > >> Both of these will be running with the normal token for that user. In other > >> words, if you runas an admin in admin approval mode, you get a low admin > >> token. To get an elevated token you would need an app that can elevate > >> arbitrary processes on the command line. I wrote one of those for the Windows > >> Vista Security book, but it is not quite ready for prime time yet. > >> > >> "Joe Richards [MVP]" wrote: > >> > >>> Not that I am aware of. > >>> > >>> -- > >>> Joe Richards Microsoft MVP Windows Server Directory Services > >>> Author of O'Reilly Active Directory Third Edition > >>> www.joeware.net > >>> > >>> > >>> ---O'Reilly Active Directory Third Edition now available--- > >>> > >>> http://www.joeware.net/win/ad3e.htm > >>> > >>> > >>> workinghard@news.postalias wrote: > >>>> Yes, sure that works, making custom shortcuts etc ... but is there any way > >>>> to add it to the contect menu using the registry a lot of folks would > >>>> appreciate that. > >>>> > >>>> Cheers > >>>> > >>>> > >>>> "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message > >>>> news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... > >>>>> Use runas executable from the command prompt. > >>>>> > >>>>> -- > >>>>> Joe Richards Microsoft MVP Windows Server Directory Services > >>>>> Author of O'Reilly Active Directory Third Edition > >>>>> www.joeware.net > >>>>> > >>>>> > >>>>> ---O'Reilly Active Directory Third Edition now available--- > >>>>> > >>>>> http://www.joeware.net/win/ad3e.htm > >>>>> > >>>>> > >>>>> workinghard@news.postalias wrote: > >>>>>> Hello, > >>>>>> > >>>>>> Local admins only get the option to "Run as Admin" when using > >>>>>> right-click, which uses the account with admin rights they are logged in > >>>>>> with. How can we enable them to choose an alternative domain account with > >>>>>> priviledges for like running Exchange or AD admin tools on administrative > >>>>>> workstations? > >>>>>> > >>>>>> Thx! > >>>>>> > >>>>>> Cheers > >>>> > |
My System Specs![]() |
| | #9 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator Hi Joe, If I try this logged in as a user who is a member of the Administrators group, the RunAs command does NOT allow elevation. For example if I log in as MACHINE\LocalAdmin (with UAC enabled) then start a command prompt as "Administrator", then try to RUNAS gpmc and enter my domain admin credentials, it's gives an error saying it can't elevate... Joe Richards [MVP] wrote: > Certainly an option but I would way go for using the cmd prompt and > running runas there. Likely I could start up an admin tool faster that > way then someone could do it via the GUI anyway. ![]() > > > -- > Joe Richards Microsoft MVP Windows Server Directory Services > Author of O'Reilly Active Directory Third Edition > www.joeware.net > > > ---O'Reilly Active Directory Third Edition now available--- > > http://www.joeware.net/win/ad3e.htm > > > Jesper wrote: >> Shoulda mentioned that you need to hard-code the username in there, >> and remove the one I put in which is a dummy test account. >> "Jesper" wrote: >> >>> Actually, there is, sort of. I wrote a couple of shell add-ons for >>> the old command prompt here to get an elevated command prompt. The >>> same process can be used here. If you export this to a reg file and >>> import it, you will get a Run As this app on the context menu for >>> executables >>> Windows Registry Editor Version 5.00 >>> >>> [HKEY_CLASSES_ROOT\exefile\shell\cRunas] >>> @="Run As this app" >>> >>> [HKEY_CLASSES_ROOT\exefile\shell\cRunas\command] >>> @="runas.exe /user:ant\\jesperAD \"%1\"" >>> >>> If you want the old command prompt here, you import this file: >>> Windows Registry Editor Version 5.00 >>> >>> [HKEY_CLASSES_ROOT\Directory\shell\CmdHere] >>> @="Command Prompt Here" >>> >>> [HKEY_CLASSES_ROOT\Directory\shell\CmdHere\command] >>> @="cmd.exe /k cd \"%1\"" >>> >>> Both of these will be running with the normal token for that user. In >>> other words, if you runas an admin in admin approval mode, you get a >>> low admin token. To get an elevated token you would need an app that >>> can elevate arbitrary processes on the command line. I wrote one of >>> those for the Windows Vista Security book, but it is not quite ready >>> for prime time yet. >>> "Joe Richards [MVP]" wrote: >>> >>>> Not that I am aware of. >>>> >>>> -- >>>> Joe Richards Microsoft MVP Windows Server Directory Services >>>> Author of O'Reilly Active Directory Third Edition >>>> www.joeware.net >>>> >>>> >>>> ---O'Reilly Active Directory Third Edition now available--- >>>> >>>> http://www.joeware.net/win/ad3e.htm >>>> >>>> >>>> workinghard@news.postalias wrote: >>>>> Yes, sure that works, making custom shortcuts etc ... but is there >>>>> any way to add it to the contect menu using the registry a lot of >>>>> folks would appreciate that. >>>>> >>>>> Cheers >>>>> >>>>> >>>>> "Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message >>>>> news:OTwr3OMOHHA.780@TK2MSFTNGP03.phx.gbl... >>>>>> Use runas executable from the command prompt. >>>>>> >>>>>> -- >>>>>> Joe Richards Microsoft MVP Windows Server Directory Services >>>>>> Author of O'Reilly Active Directory Third Edition >>>>>> www.joeware.net >>>>>> >>>>>> >>>>>> ---O'Reilly Active Directory Third Edition now available--- >>>>>> >>>>>> http://www.joeware.net/win/ad3e.htm >>>>>> >>>>>> >>>>>> workinghard@news.postalias wrote: >>>>>>> Hello, >>>>>>> >>>>>>> Local admins only get the option to "Run as Admin" when using >>>>>>> right-click, which uses the account with admin rights they are >>>>>>> logged in with. How can we enable them to choose an alternative >>>>>>> domain account with priviledges for like running Exchange or AD >>>>>>> admin tools on administrative workstations? >>>>>>> >>>>>>> Thx! >>>>>>> >>>>>>> Cheers >>>>> -- Gerry Hickman (London UK) |
My System Specs![]() |
| | #10 (permalink) |
| Guest | Re: Run as instead of Run as Adminstrator same issue here. Can,t elevate with the RUN AS ADMIN command. What gives ? Dan Sudbury, Canada |
My System Specs![]() |
|
| Thread Tools | |
| Display Modes | |
| |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Run As Adminstrator - why hasn't it saved us? | riix | Vista security | 14 | 08-18-2008 08:28 AM |
| Adminstrator problem | KingMe | Vista General | 2 | 06-20-2008 08:29 PM |
| adminstrator has parental controls? | dave351 | Vista account administration | 1 | 06-07-2008 02:37 PM |
| Adminstrator Access Required | Jarrod | Vista account administration | 7 | 05-26-2008 08:33 AM |
| Adminstrator | doroetha | Vista account administration | 2 | 04-06-2008 05:29 PM |
| Complimentary Industry Resources Vista Forums has joined forces with TradePub.com to offer you a new, exciting, and entirely free professional resource. Visit http://vistax64.tradepub.com today to browse our selection of complimentary Industry magazines, white papers, webinars, podcasts, and more across 34 industry sectors. No credit cards, coupons, or promo codes required. Try it today! |