Can't run runas from LOCAL SYSTEM ACCOUNT

I am trying to run "runas" from the Local System Account.    I create the LSA cmd shell with the at command.

runas /user:administrator calc
Enter the password for administrator
Attempting to start calc
RUNAS ERROR: Unable to run - calc
5: Access is denied.

I get the above error running this on Windows 2003 or XP.  I can get it to work Windows 2000.

I think it maybe Group policy but I'm not sure were to look

Thanks
milesriAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

H_HarryCommented:
Is this your own computer or a work one?
Reason I ask is that the administrator account could have been renamed without your knowledge if it is a work one.
An obvious point to raise I know but are you 100% supplying the correct password?
I don't know of any GPO's that can restrict who can use the runas command. Calc could be restricted though - have you tried with other programs, notepad etc etc.
I have just tried the exact syntax you used on my XP sp3 machine and it worked fine, so I am leaning towards an incorrect password or an issue with calc.
0
H_HarryCommented:
Ah, sorry I missed the first line of your post - is there a reason why you are running it from a SYSTEM command shell?
You won't be able to impersenate another user if you have SYSTEM rights, it is simply impossible.
You can obviously use runas as any other user account if you know the admin password.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
H_HarryCommented:
^ From XP SP0 onwards.
0
The Five Tenets of the Most Secure Backup

Data loss can hit a business in any number of ways. In reality, companies should expect to lose data at some point. The challenge is having a plan to recover from such an event.

milesriAuthor Commented:
This is a work computer and I have tried other commands.   I have tried other accounts besides the admin account and I can run runas with out the Access Denied error.  It just when its the LOCAL SYSTEM ACCOUNT that it won't run
0
milesriAuthor Commented:
Thanks
0
H_HarryCommented:
Technically you should never really be interactively logged on as SYSTEM, although obviously there is a plethora of ways to do so if you are an admin. Due to this you can't impersonate the administrator from SYSTEM. You can do Admin to System but not vice versa.
Although you have an interactive command shell as SYSTEM so really you are above admin to all intents and purposes.
0
milesriAuthor Commented:
I am using Altiris to deploy Applications and it uses the local system account.  Everything works fine except for the Apache softare we are trying to deploy.  It doesn't like being installed as system,  hence the question.    I'll change it use use admin account

Thanks for the help.
0
H_HarryCommented:
Not objecting to the post being closed but not sure why he has accepted his own post as the answer? Don't know if it makes a difference to anything.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.