Difference between revisions of "Active Directory/Documentation/ShellRunAs"

From WolfTech
Jump to navigation Jump to search
m (New page: Once again, Mark Russinovich is one of my favorite people on the planet. User Account Control in Vista is a pain in the butt for having account separation on the same box. Your choices a...)
 
m
 
(3 intermediate revisions by 2 users not shown)
Line 3: Line 3:
 
User Account Control in Vista is a pain in the butt for having account separation on the same box.  Your choices are to always have it prompt for credentials, or always assume running something as local admin. Running something as another domain account is a pain.
 
User Account Control in Vista is a pain in the butt for having account separation on the same box.  Your choices are to always have it prompt for credentials, or always assume running something as local admin. Running something as another domain account is a pain.
  
So he wrote ShellRunas, which is a context menu replacement for how Runas used to work in XP. Run shellrunas.exe /regnetonly and your good to go.
+
So he wrote ShellRunas, which is a context menu replacement for how Runas used to work in XP. Run shellrunas.exe /reg and your good to go.
  
 
<http://technet.microsoft.com/en-us/sysinternals/cc300361.aspx>
 
<http://technet.microsoft.com/en-us/sysinternals/cc300361.aspx>
  
Billy Beaudoin
+
Billy Beaudoin<BR>
ITECS Systems
+
ITECS Systems<BR>
 
NC State University
 
NC State University
 +
 +
  Note from Dan: This plus a custom MMC works like magic.
 +
 +
Sample use:
 +
*Place into c:\shellrunas\
 +
*Create shortcut c:\shellrunas\shellrunas.exe "C:\Users\djgreen.domadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dansMMC.msc" (or whereever you have your MMC saved)
 +
*Run the shortcut, enter your elevated creds, and voila.

Latest revision as of 09:59, 1 June 2009

Once again, Mark Russinovich is one of my favorite people on the planet.

User Account Control in Vista is a pain in the butt for having account separation on the same box. Your choices are to always have it prompt for credentials, or always assume running something as local admin. Running something as another domain account is a pain.

So he wrote ShellRunas, which is a context menu replacement for how Runas used to work in XP. Run shellrunas.exe /reg and your good to go.

<http://technet.microsoft.com/en-us/sysinternals/cc300361.aspx>

Billy Beaudoin
ITECS Systems
NC State University

  Note from Dan: This plus a custom MMC works like magic.

Sample use:

  • Place into c:\shellrunas\
  • Create shortcut c:\shellrunas\shellrunas.exe "C:\Users\djgreen.domadmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dansMMC.msc" (or whereever you have your MMC saved)
  • Run the shortcut, enter your elevated creds, and voila.