[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3562
  • Last Modified:

Can't run runas from LOCAL SYSTEM ACCOUNT

I am trying to run "runas" from the Local System Account.    I create the LSA cmd shell with the at command.

runas /user:administrator calc
Enter the password for administrator
Attempting to start calc
RUNAS ERROR: Unable to run - calc
5: Access is denied.

I get the above error running this on Windows 2003 or XP.  I can get it to work Windows 2000.

I think it maybe Group policy but I'm not sure were to look

Thanks
0
milesri
Asked:
milesri
  • 5
  • 3
1 Solution
 
H_HarryCommented:
Is this your own computer or a work one?
Reason I ask is that the administrator account could have been renamed without your knowledge if it is a work one.
An obvious point to raise I know but are you 100% supplying the correct password?
I don't know of any GPO's that can restrict who can use the runas command. Calc could be restricted though - have you tried with other programs, notepad etc etc.
I have just tried the exact syntax you used on my XP sp3 machine and it worked fine, so I am leaning towards an incorrect password or an issue with calc.
0
 
H_HarryCommented:
Ah, sorry I missed the first line of your post - is there a reason why you are running it from a SYSTEM command shell?
You won't be able to impersenate another user if you have SYSTEM rights, it is simply impossible.
You can obviously use runas as any other user account if you know the admin password.
0
 
H_HarryCommented:
^ From XP SP0 onwards.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
milesriAuthor Commented:
This is a work computer and I have tried other commands.   I have tried other accounts besides the admin account and I can run runas with out the Access Denied error.  It just when its the LOCAL SYSTEM ACCOUNT that it won't run
0
 
milesriAuthor Commented:
Thanks
0
 
H_HarryCommented:
Technically you should never really be interactively logged on as SYSTEM, although obviously there is a plethora of ways to do so if you are an admin. Due to this you can't impersonate the administrator from SYSTEM. You can do Admin to System but not vice versa.
Although you have an interactive command shell as SYSTEM so really you are above admin to all intents and purposes.
0
 
milesriAuthor Commented:
I am using Altiris to deploy Applications and it uses the local system account.  Everything works fine except for the Apache softare we are trying to deploy.  It doesn't like being installed as system,  hence the question.    I'll change it use use admin account

Thanks for the help.
0
 
H_HarryCommented:
Not objecting to the post being closed but not sure why he has accepted his own post as the answer? Don't know if it makes a difference to anything.
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now