J
jg
regedit does not take on proper impersonation when administrator uses
runas /user:somePowerUser cmd.exe
then from the cmd prompt for somePowerUser windows
regedit
proof: the current is not for somePowerUser but the administrator's
Granted that values that can not be changed by somePowerUser, nonetheless, I
still don't think it is correct behaviour
why do I want to do regedit from somePowerUser instead of administrator? I
need to confirm the SID for the somePowerUser before I modify them
runas /user:somePowerUser cmd.exe
then from the cmd prompt for somePowerUser windows
regedit
proof: the current is not for somePowerUser but the administrator's
Granted that values that can not be changed by somePowerUser, nonetheless, I
still don't think it is correct behaviour
why do I want to do regedit from somePowerUser instead of administrator? I
need to confirm the SID for the somePowerUser before I modify them