Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: kevinb on June 12, 2007, 08:40:47 PM

Title: Executing with admin rights for non-admin users
Post by: kevinb on June 12, 2007, 08:40:47 PM

I know I can use netlogon.bat to run commands when a user logs on but is there any way I can execute commands with admin rights when a non-admin user logs in?

Thanks

Kevin

Title: Executing with admin rights for non-admin users
Post by: mmccarn on June 13, 2007, 02:20:47 PM

Are you asking how to run commands as admin on your SME server, or how to run commands as a local administrator from 'netlogon.bat' as non-admin users login to your network?

Title: Executing with admin rights for non-admin users
Post by: kevinb on June 13, 2007, 03:16:00 PM

How to run commands as a local administrator from 'netlogon.bat' or some other method, as non-admin users login to your network.

Title: Executing with admin rights for non-admin users
Post by: mmccarn on June 13, 2007, 03:44:48 PM

Win XP comes with 'runas' to let you do this.

You would have to run the batch file once on each workstation using the "/savecred" option (assuming xp pro workstations; /savecred is not supported on xp home).

There are some inherent problems - you may not be able to access the server from the programs you run using "/runas" (you definitely can't on a windows server - 'credentials supplied conflict with an existing set of credentials' - but it may work on SME...)

Here's another link I've found to an add-on to allow 'runas' with an encrypted password database: http://www.robotronic.de/runasspcEn.html

Title: Executing with admin rights for non-admin users
Post by: matsk on June 13, 2007, 03:48:04 PM

the Windows 200x/XP command is "runas" but I'm unshure how you can pipe the password into that command othervise you should look into policies on Windows 200x/XP.  But questions about that you have to go to a windows forum ;-)