Solved

How to allow a program always run at startup and run as an administrator?

Posted on 2004-07-30
5
943 Views
Last Modified: 2013-12-04
I create a Limit user account, this account have a program always run at startup and it needs to read/write some settings in the registry. However Windows prevents it from modifying the registry because it's running under a Limit user account.
How do I allow this program always run at startup with administrator permission?
0
Comment
Question by:geidza
5 Comments
 
LVL 4

Expert Comment

by:WerewolfTA
ID: 11677331
Sounds like you need to script that program to run with administrator credentials.  Try this link:

http://www.jsiinc.com/SUBO/tip7100/rh7111.htm
0
 
LVL 11

Expert Comment

by:gothicbloody
ID: 11680141
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 11680264
Two cases here: If the program changes (restricted) settings in the HKCU part, there's nothing you can do except change the permissions on the trees in question. Any "runas" procedure will not have access to another user's registry.
If this is only about the HKLM part, the easiest solution would be to simply create a scheduled task to run at logon, and use an appropriate user account to run the scheduled task.
Another option, if the security on the keys in question isn't really a concern, would be to get RegMon (http://www.sysinternals.com/ntw2k/source/regmon.shtml) (and maybe FileMon, http://www.sysinternals.com/ntw2k/source/filemon.shtml), logon with the limited account, start RegMon with an administrative account using runas, filter for your program and have RegMon log errors only, then start the program. RegMon will report the errors, so that you can identify the keys in question and change the permissions accordingly. Once that's done, the user can run the program without further problems.
0
 
LVL 4

Expert Comment

by:WerewolfTA
ID: 11680474
Damn, I think I like oBdA's solutions better than mine.  :)  

Never even thought about the reg keys permissions in HKCU. You rock, man!
0
 

Author Comment

by:geidza
ID: 11682915
yes, setting key permissions in the registry is a simple way.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now