Running a program as somebody else

  • Thread starter Thread starter bxb7668
  • Start date Start date
B

bxb7668

Is it possible for user A to run a application using the login
credentials of user B without their knowing the password of user B? We
need user A to be able to run a program with elevated privileges but
do not want to give them the password. The only option that I've been
able to find is to set up runas, but that requires the user to know
the password.

Brian Bygland
 
Why do you think they have passwords?
--
XP - WNP
Today is the first day of the
rest of your life.
If you find this response helpful,
rate it below.
 
Are you running XP Home or Professional? The program could
be installed in a new folder that could be shared with your
limited user, or if you have XP Pro, you can set program
access for different classes of users [Power User, etc.]


| Why do you think they have passwords?
| --
| XP - WNP
| Today is the first day of the
| rest of your life.
| If you find this response helpful,
| rate it below.
|
|
| "bxb7668" wrote:
|
| > Is it possible for user A to run a application using the
login
| > credentials of user B without their knowing the password
of user B? We
| > need user A to be able to run a program with elevated
privileges but
| > do not want to give them the password. The only option
that I've been
| > able to find is to set up runas, but that requires the
user to know
| > the password.
| >
| > Brian Bygland
| >
| >
| >
 
We're running Win XP Pro. The folder access is not the problem. They
can get to it. The problem is that the application requires you to be
either the database owner or server Administrator to perform certain
commands. We want to put a specific one of those commands in a script
which the user can read and execute but cannot change. We want the
users to then be able to execute that script as if they were the
database owner. Obviously we do not want them to be able to actually
log on as the database owner other than in the context of running this
script. On UNIX I'm able to create scripts that run SETUID. I would
like to be able to do that in Windows.

Brian Bygland
 
bxb7668 said:
We're running Win XP Pro. The folder access is not the problem. They
can get to it. The problem is that the application requires you to be
either the database owner or server Administrator to perform certain
commands. We want to put a specific one of those commands in a script
which the user can read and execute but cannot change. We want the
users to then be able to execute that script as if they were the
database owner. Obviously we do not want them to be able to actually
log on as the database owner other than in the context of running this
script. On UNIX I'm able to create scripts that run SETUID. I would
like to be able to do that in Windows.
Click to expand...

Look at sudoWn. I was looking for an equivalent of sudo for Windows and
came across this. I haven't tried it, so caveat emptor and YMMV and all
that. Even though as you well know sudo is supposed to be used
temporarily, perhaps you can configure the time sudoWn is active.

http://sudown.mine.nu/

Malke
 
You should be able to assign ownership to that user or group and setup the
permissions correclty. You can also enable audit, to monitor attemps to make
changes or set the file as read-only.
 
bxb7668 said:
Is it possible for user A to run a application using the login credentials
of user B without their knowing the password of user B? We need user A to
be able to run a program with elevated privileges but do not want to give
them the password. The only option that I've been able to find is to set
up runas, but that requires the user to know the password.

Brian Bygland
Click to expand...

Hi
you find a simple solution on www.robotronic.de/runasspcen.html
it is a tool like runas but the password and other login information are in
an encrypt file.
 
Back
Top