Runas without a password prompt?

Hi all!
We have a single program that requires administrator access to run it.  The problem with running all users locally as administrators is that they can obviously install anything they want.  What's the best solution to open this program with administrative rights but not give all users administrative rights?

Thanks
Mike
FFMikeM110Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

darmentedCommented:
I have used the solution at the following link with great success.

http://www.kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=153620&site_id=1#import
0
darmentedCommented:
0
FFMikeM110Author Commented:
Is there a way without using a 3rd party program?
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

B HCommented:
you can create a batch file that pumps the password into the runas, but it will be readable text and the users would be able to see the admin password

there are many 3rd party programs out there that can encrypt the password for you, but, those are 3rd party
0
FFMikeM110Author Commented:
Okay, can you show me the syntax for the runas in a batch file?
0
B HCommented:
@echo off
echo password | runas /user domain\username "c:\some\path\file.exe"
cls


that should work fine - i threw in the echo off and cls to hide the password from the users as best as can be

optionally, you can save that as something.bat and then create a SHORTCUT to it, and set the shortcut properties to run minimized, so they wont see the black box pop up

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FFMikeM110Author Commented:
I just tried the batch file idea.  I logged in as a regular user without admin rights. I ran the batch file, and nothing happened... I saw the black box popup and then close, but the program never opened.

Alternatively, when I went to open the shortcut directly to the program (not the batch file) and chose run as, then put in the administrator username and password, I got:

"M:\etc...."
The specified path does not exist
Check this path, and then try again"
0
B HCommented:
oh i didnt know it was on a mapped drive...  you'll need to map the drive in the batch file too.  when 'administrator' logs in for a second, there's no M drive for him

@echo off
echo password | runas /user domain\username "\\server\path\to\share\file.exe"
cls

see if that does it.  the server and path should be whatever your m drive maps to
0
FFMikeM110Author Commented:
ah, sorry about that!

I get a new array of errors now...

Box title: SP2 error
"open-file failed - abort?"  Yes/No
0
johnb6767Commented:
May be a simple solution...... Might just be a reg key/file/folder that needs to be opened up for this app to run properly...........

Process Monitor
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx

Set the filter at the top to Include "Result" is "Access Denied" then "Include", and then launch the app as a restricted user. Look for the log, and then open up any folders/reg keys for "Modify" rights to the Users group. Then retest.....

This is usually sufficient for most apps, as very rarely does one need FULL admin rights.....
0
FFMikeM110Author Commented:
Nothing shows up under "ACCESS DENIED"
0
johnb6767Commented:
Whats the group memberships of the user you ran the app as?

And I am assuming that you did a RunAs for Procmon.exe with an Admin account?

You might want to change the result from "Access Denied", to "Not Found"...... You will see wuite a few, but it might be looking for something in the Administrator profile.... Some poorly written apps are like this.....

0
zubairmohd635ifCommented:
(Raise my rights) is the best program  i ever saw to run a program with administrative rights without giving users local admin rights on the computer search from google and download.
You have to run this program and give the path of the program to run and create shortcut.
0
FFMikeM110Author Commented:
Works.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.