• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 181
  • Last Modified:

Run with alternate credentials for a specific application

Dear experts,

We have a Visual Foxpro application we'd like to run on a Windows XP limited account. However, it doesn't want to run under a limited account. It keeps generating errors saying it can't write to some files. We don't want to change the account to an administrator to prevent harmful changes, but we're pretty stumped on how to run our program.

We're thinking of an automated script that will select an administrator account and enter the password, but we haven't found anything that'll do it.

Any ideas will be much appreciated. Thanks!
0
jericotolentino
Asked:
jericotolentino
3 Solutions
 
plimpiasCommented:
HI, can you give access to those files to that restricted user account? If it is all the computer workstations that you need to give access to then you can create a policy for them and give them rights to folder permissions and registry permissions.


http://technet2.microsoft.com/WindowsServer/en/library/1687ef1d-b382-49c7-b184-a4cc888be5251033.mspx?mfr=true
0
 
jericotolentinoAuthor Commented:
Thanks for the quick reply, but we can't seem to find the Group Policy Object Editor. We're using Windows XP Home SP2.
0
 
bbaoIT ConsultantCommented:
run GPEDIT.MSC from Start | Run.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
jericotolentinoAuthor Commented:
Windows says it can't find gpedit.msc. AFAIK, the group policy editor comes only with Windows XP Professional.
0
 
plimpiasCommented:
Home doesn't support group policy.

Since this isn't on a domain, you'l need to do it manually. Go to each folder that the app needs right access to. Right click the folder and go to properties, click the security tab (not if you do not see the security tab, Open explorer. Tools, Folder Options, View, The last option on the bottom, "User simple file sharing" Uncheck that, then right again.

After you get to the secuirty settings, add the user and give them the rights they need.
0
 
McKnifeCommented:
Home does not support altering NTFS rights as well UNLESS you use cacls.exe or you log on to safe mode.
You could as well install Fajo xpfse (freeware) on each machine which adds the ability to alter security to home edition.
You will probably also have to alter access rights on certain regsitry branches.

The script you are looking for is realized with sanur.exe: http://www.commandline.co.uk/sanur/
0
 
johnb6767Commented:
If you create a batch file, to launch this free utility, you can include another users credentials to run it with. Similar to teh built in 'runas' command, but the difference is you can parse a password to the command via switches...

http://joeware.net/win/free/tools/cpau.htm

Just make sure it is either in a registered system path, like c:\windosw, or c:\windows\system32...
0
 
Rich RumbleSecurity SamuraiCommented:
Here is a runas script that may suit your needs. You should be able to change the NTFS rights and or registry rights to get the app working. I'd use runas or a scheduled task as a last resort: http://www.xinn.org/RunasVBS.html
have a look at these also: http://nonadmin.editme.com/UsefulTools
-rich
0
 
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now