A few other options:
Prevent the use of the runas.exe file itself via group policy for specific users or machine wide,
http://www.windowsnetworki
Or/Also remove the "run as" from the menu (this method wont stop them from doing a runas in a cmd window though.
http://www.petri.co.il/dis
hope this helps,
zf
Main Topics
Browse All Topics





by: tgerbertPosted on 2009-11-02 at 09:57:05ID: 25721737
You might be able to disable the "Secondary Logon" service (manually, or through Group Policy). This service is responsible for allowing "Run As...", I'm not sure if disabling it would affect anything else - but that's easy to test, you can always restart it if there are problems. Also have a look at this link: http://windowsdevcenter.co m/pub/a/wi ndows/2004 /03/16/ ser verhacks_r unas.html
Although, ultimately this isn't going to keep people from logging on with someone else's credentials, only way to prevent that is to make sure users don't share their passwords.