Rights to EXE but not to the user

  • Thread starter Thread starter Pavan Jha
  • Start date Start date
P

Pavan Jha

Hi,

I want my EXE to create folders in a specific directory, but the
logged users (running the EXE) should not have the rights to create
folders there manually (in explorer/dos shell)... I want to implement
this without using "Run As.." on my EXE


Thanks

Pavan Jha
 
Pavan Jha said:
I want my EXE to create folders in a specific directory, but the
logged users (running the EXE) should not have the rights to create
folders there manually (in explorer/dos shell)... I want to implement
this without using "Run As.." on my EXE
Click to expand...

You have set up contradictory requirements. EXEs are run as the
current user, unless you use RunAs to change the default and supply
alternative credentials.

So, it's cannot be done as stated. The standard way to accomplish
the IDEA is to build a "server" -- let it run as a service under the
system account or other credentials -- and have the "EXE" contact
that service to perform the actions requiring a different identity.

A standard service or a com component can perform this type of
work.
 
Hi,

I want my EXE to create folders in a specific directory, but the
logged users (running the EXE) should not have the rights to create
folders there manually (in explorer/dos shell)... I want to implement
this without using "Run As.." on my EXE
Click to expand...

You should be able to run if from the computer's startup script.
This can be set up using a GPO. Running from the computer's startup
script rather than the user's logon script, it will run with
SYSTEM privileges.

Alternately, you can have the users run it from a script that provides
alternate credentials:

http://www.winnetmag.com/WindowsScripting/Article/ArticleID/39114/39114.html
 
Back
Top