Windows Run as to let a legacy program run in XP limited user mode



Several months back I had to figure out a way to get Create a card gold (5.0?) run on an XP system. The only real problem was that I had setup the account with limited user privileges (shared machine, several users, all with limited account priviliges.) But, somehow the program didn’t work well without administrator priviliges. Giving the account full administrator priviliges all the time was not an option and try as I might, I couldn’t find the right program directory to give expanded permissions that would solve the issue.


Now, YES there are newer versions of creat-a-card gold, but none seem well reviewed. In fact, some of the reviews I’ve seen are along the lines of “stick with version 5″. So, that wasn’t a great choice either. Finally, I created another user that I gave administrator priviliges to. Then used the “run as” function to run that program as this “new” more priviliged user. I gave the user the same password as the limited user account so that she would only have to type in her password again when the program ran.

Now, I’ll admit, it isn’t pretty (the password prompt is a big black command window.) But, it works. I essentially made a batch script (command script) that’s on the desktop that has one line….

runas /user:priviliged “c:program filespathtocreate-a-card-gold.exe”

The big black window pops up asking for the password and then things work as normal after that.

YES, this could introduce vulnerabilities. A user could modify the script to “runas” that user for another program, or use that program to save files in an area that they aren’t normally allowed to. This can compromise a tight setup. That much said, in this situation it was a compromise for a legacy application that could be made without giving an “all the time” administrator login.

There was another problem though – how to keep that new user from showing up in the login screen?

Related Posts

Blog Traffic Exchange Related Posts
  • Remote Tech Support using VNC (Ultravnc SC and x11vnc+wrapper script) Ok, some time back I'd done a writeup on UltraVNC SC, which is a nice customizable (windows version) VNC server that essentially let's someone doing remote support build their own downloadable .exe that runs and automatically tries to make a direct connection to a "listening" vnc viewer. It's good for......
  • Windows lost administrator password rundown.... I've done one or two mentions in the past of ways to recover/reset lost windows passwords and thought it was probably time for another "brain dump/web research dump" of things that I've run across. This is not just for lost administrator passwords, but could apply to a lost user account......
  • Possible Windows Scheduler local privilige escalation Sans has a writeup on Windows local privilige escalation using the Windows scheduler and among other things it might be worth starting out by saying that typically, only Administrative group users in Windows XP are allowed to access the Windows Scheduler. However, I have read reference of some installs that......
Blog Traffic Exchange Related Websites
  • Using Free Registry Cleaners to Clean your Registry Free registry cleaners can help you to get rid of all those pesky system errors and crashes and also improve overall pc performance. Problems with the windows registry is a common cause for Windows errors, crashes and lack of performance. To resolve these issues you can either format your hard......
  • When To Purchase Window Replacements These folks serve as our browse to the outside world and bring the glowing sunlight into our residence each and every day. What is this secret product? Home windows, naturally. These folks are more in contrast to a check out, having said that, as these folks also shield us from......
  • Lending Club Clarifies Referral Program at P2P No Bank Forum After my gripes I will reproduce the post on p2p no bank post in entirety...  User must sign up in the same session...  Amazon, EBay, Prosper, and many many more affiliate programs have a cookie that lasts 30 days. Any page of the lending club website (including the blog if......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site