Topic: Executing with admin rights for non-admin users

[kevinb]

I know I can use netlogon.bat to run commands when a user logs on but is there any way I can execute commands with admin rights when a non-admin user logs in?

Thanks

Kevin

[mmccarn]

Are you asking how to run commands as admin on your SME server, or how to run commands as a local administrator from 'netlogon.bat' as non-admin users login to your network?

[kevinb]

How to run commands as a local administrator from 'netlogon.bat' or some other method, as non-admin users login to your network.

[mmccarn]

Win XP comes with 'runas' to let you do this.

You would have to run the batch file once on each workstation using the "/savecred" option (assuming xp pro workstations; /savecred is not supported on xp home).

There are some inherent problems - you may not be able to access the server from the programs you run using "/runas" (you definitely can't on a windows server - 'credentials supplied conflict with an existing set of credentials' - but it may work on SME...)

Here's another link I've found to an add-on to allow 'runas' with an encrypted password database: http://www.robotronic.de/runasspcEn.html

[matsk]

the Windows 200x/XP command is "runas" but I'm unshure how you can pipe the password into that command othervise you should look into policies on Windows 200x/XP.  But questions about that you have to go to a windows forum