Elevate user rights versus RunAs

  • Thread starter Thread starter Wes
  • Start date Start date
W

Wes

Is there any way that I can temporarily elevate a user's rights/memberships?
I have an app that requires each user to have admin rights to properly
execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the user
account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be performed.
Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights to
a user for a specific period of time (Ex. 1hr or until logoff).

Any ideas?

Thanks,
Wes
 
Wes said:
Is there any way that I can temporarily elevate a user's
rights/memberships? I have an app that requires each user to have admin
rights to properly execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the
user account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be
performed. Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights
to a user for a specific period of time (Ex. 1hr or until logoff).
Click to expand...

You are describing the ever-useful sudo in *nix operating systems. Windows
doesn't have the equivalent, although there are a few third-party apps such
as WinSudo (which I haven't tried).

However, Microsoft's Aaron Margosis's MakeMeAdmin might work for you:

http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

Malke
 
Back
Top