asked on

Can't gain escalated privileges to windows explorer by doing a RUNAS on IE7

Anyone finding the 'Principle of Least Privilege' not as easy to work with since moving to IE7? I restrict my personal acct the same as anyone else for daily work, even though I'm admin. When I need admin rights, I use the admin level acct. I used to be able to runas in IE6 and older with elevated rights and then change the location away from the web and instead to C: OR \\computername\C$ and effectively have a windows explorer window with elevated rights WITHOUT LOGGING OFF or doing any furhter "runas" commands. Can't do it anymore in IE7. Anyone have a good workaround with IE7 or an equally effective alternative to escalate privileges in windows explorer w/o logging off and w/o having to keep doing runas commands?

bigjimbo813

i too have seen that you cant run IE7 as an administrator and have it hold the credentials. How ever when connecting to shares, I have had it prompt me for credentials to access that share.

expexchuser

ASKER

Correct. I noticed it prompts for credentials, and that defeats doing the runas on IE7 in the first place. It would be the same as going \\computer\share and being prompted to authenticate. I'm glad I'm not alone (misery loves company). I just hope someone has found a way to rehabilitate post-ie7.

ASKER CERTIFIED SOLUTION

bigjimbo813

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

expexchuser

ASKER

Okay, thanks for your help. I'm going to leave this open a while in hopes someone knows a way to gain access to an escalated shell post IE7.

expexchuser

ASKER

Ah what the heck. I might as well award the points. Not like I paid for them or anything. If you can't, you can't. But please keep searching out new ways. If you figure it out, please post back here. I will do the same. I'm far from giving up. Thanks!

expexchuser

ASKER

I found how to fix this on Aaron Margosis' weblog:
http://blogs.msdn.com/aaron_margosis/archive/2004/07/07/175488.aspx

See option 2 on this page:
Set the flag that allows explorer.exe to work with RunAs