CPAU Update - "Encrypted" Job Files

[Joe Richards [MVP]]

Howdy,

I have been hounded since releasing the joeware tool CPAU (Create Process As User) by command line junkies the world
over to add the ability to use encyrpted passwords so they can do fun stuff in logon scripts, etc without others being
able to see userids and passwords.

Well I realized encrypting passwords wasn't good enough, I needed to encrypt the entire job that was to be done. I have
now done that. The new version of CPAU is Version 1.02.00 and has the concept of "encrypted" job. When you tell it to
create the job file it will generate a text file with some info in it, this translates that to the info needed for CPAU
to later execute the job as the specified user without whomever launching the program knowing the details.

So you can do things like

cpau /u joehome\joe /p password /ex "net localgroup administrators joehome\normaluser /add" /enc /file addnormaluser.job

and then in a logon script as long as the userid and password is correct do

cpau /dec /file addnormaluser.job

and it will execute the command with very very little chance that the local user could ascertain the password and ID
used. Basically they would have to unscramble the job file which while certainly possible, would be difficult.


Ex:

F:\Dev\cpp\CPAU>cpau -u joehome\joe -p password -ex notepad -file joe-notepad.txt -enc

CPUA V01.02.00cpp Joe Richards ([email protected]) December 2003

Attempting to create CPAU job file: joe-notepad.txt

The command completed successfully.


F:\Dev\cpp\CPAU>type joe-notepad.txt
365361D221141003745606326266456316236426246216406236146356
1461363261360662760460462460160260157657661560160061357457
0570566564565562562560562562557553556553556551550553547545
4745415435635405365555405355565365325535305305455265245465
1752253751751553352051553150751053251152552550450147750247
6476472475471476472467464466465467462461464460456405453452
4724564474704524664704464454424424414564414344324374314304
2742742535442642144542141744041541343241641043441340642540
7403424405377421403400374375374411374371405364366362360362
357355357376360352352347351350346345344343343341

F:\Dev\cpp\CPAU>cpau -dec -file joe-notepad.txt -profile

CPUA V01.01.00cpp Joe Richards ([email protected]) December 2003

Attempting to use job file joe-notepad.txt
Successfully Processed File
Process Created...

The command completed successfully.


F:\Dev\cpp\CPAU>



For more info or to download go to the free win32 tools page of www.joeware.net, also check out the what's new page.

joe

 

[Marty List]

Very nice, I like it. Thanks.

 

[Joe Richards [MVP]]

Thanks Marty.

 

[Al Dunbar [MS-MVP]]

Howdy,

I have been hounded since releasing the joeware tool CPAU (Create Process

As User) by command line junkies the world

over to add the ability to use encyrpted passwords so they can do fun

stuff in logon scripts, etc without others being

able to see userids and passwords.

If I had known that all I had to do was hound you, well...

Well I realized encrypting passwords wasn't good enough, I needed to

encrypt the entire job that was to be done. I have

now done that. The new version of CPAU is Version 1.02.00 and has the

concept of "encrypted" job. When you tell it to

create the job file it will generate a text file with some info in it,

this translates that to the info needed for CPAU

to later execute the job as the specified user without whomever launching

the program knowing the details.

<snip>

Way cool, this could be just the ticket for a couple of things we are doing.

/Al

 

[Mark V]

In microsoft.public.win2000.cmdprompt.admin Joe Richards [MVP]
wrote:

Howdy,

I have been hounded since releasing the joeware tool CPAU (Create
Process As User) by command line junkies the world over to add the

[ ]

For more info or to download go to the free win32 tools page of
www.joeware.net, also check out the what's new page.

I've used some of your stuff Joe, but never CPAU. Looks like I need to
check it now. Thanks for your work.

 

[Joe Richards [MVP]]

No problem, I'm glad you find it useful.

--
Joe Richards
www.joeware.net

--

In microsoft.public.win2000.cmdprompt.admin Joe Richards [MVP]
wrote:

Howdy,

I have been hounded since releasing the joeware tool CPAU (Create
Process As User) by command line junkies the world over to add the

[ ]

For more info or to download go to the free win32 tools page of
www.joeware.net, also check out the what's new page.

I've used some of your stuff Joe, but never CPAU. Looks like I need to
check it now. Thanks for your work.

 

[Joe Richards [MVP]]

Glad to help out a fellow MVP. )

I get about 40-120 emails a week with ideas and suggestions. This has been a real popular suggestion. Every suggestion
that comes to me goes into my joeware wishes folder for those rainy days that I am bored. P

--
Joe Richards
www.joeware.net