asked on

Need to have a program that runs under Limited User but allows launching of Command prompt, etc. w/ Admin rights

Here's our dilemma. We have an extremely locked down environment on remote machines (no command prompt, control panel, etc). Rather than having to logoff/on each time, we need quick access to the command prompt.

We want a program that will a launch, prompt for a "daily passcode" (IE today's date * 5, or whatever). Then, you click a button and it launches the command prompt. Since the command prompt is BLOCKED by Group Policy, it needs to launch CMD.EXE w/ RUN AS but shouldn't prompt for the user.

Something like this -- > http://launch-admin.sourceforge.net/

The difference is, that we want it to be custom tailoried to our environment so we can add our "daily passcode" protection.

I'm not a programmer, but we have one here in our office that would understand VB .NET if I had the code. We can also do in VB6 if it's easy enough -- But that may not be the way to go.

Thanks!

Hillwaaa

Hi jgantes,

if you put the following into a VB .NET project it will (when run) prompt you for the users's password then start cmd.exe. There isn't a "/password" option for runas, so I don't think you can supply this easily. If you still need the "daily passcode" as well as the user you could just craft a popup windows form that prompts for the passcode. Let me know if you need a hand with this as well.

Dim x As New System.Diagnostics.Process
x.StartInfo.FileName = "runas.exe"
x.StartInfo.Arguments = "/user:DomainName\AdministratorAccountName cmd.exe"
x.Start()

Cheers,
Hillwaaa

jgantes

ASKER

Hi Hilwaaa,

I'm thinking the daily passcode part should be prett straightforward. I guess we're out of luck then on the "runas" situation. Stinks that there isn't a way to automate the password portion --

I know there is a source forge project that provides a full-fledged app. that can launch items as another user, but it's not quite what we need.

What about user impersonation in VB? Any ideas on that?

Thanks!

jgantes

ASKER

I found a third party product (that I was originally avoiding) that will do everything I need from a CLI.

http://www.quimeras.com

I'll still need a program that opens up, prompts for a "daily passcode" and if correct, lets the person enter and click a button that launchs the my third party app w/ command line switches!

ASKER CERTIFIED SOLUTION

Hillwaaa

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Hillwaaa

You'll have to update the name of the application (and any arguments) - as well as change the daily passcode function if you don't want the day*5 formula.

Cheers,
Hillwaaa

jgantes

ASKER

Thanks a ton Hilwaa!