Active Directory/Documentation/ShellRunAs

From WolfTech
Jump to navigation Jump to search

Once again, Mark Russinovich is one of my favorite people on the planet.

User Account Control in Vista is a pain in the butt for having account separation on the same box. Your choices are to always have it prompt for credentials, or always assume running something as local admin. Running something as another domain account is a pain.

So he wrote ShellRunas, which is a context menu replacement for how Runas used to work in XP. Run shellrunas.exe /reg and your good to go.

<http://technet.microsoft.com/en-us/sysinternals/cc300361.aspx>

Billy Beaudoin
ITECS Systems
NC State University

  Note from Dan: This plus a custom MMC works like magic.

Sample use:

  • Place into c:\shellrunas\
  • Create shortcut c:\shellrunas\shellrunas.exe "C:\Users\djgreen.domadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dansMMC.msc" (or whereever you have your MMC saved)
  • Run the shortcut, enter your elevated creds, and voila.