Solved

Access denied in Elevated cmd after using Runas command

Posted on 2013-06-24
11
2,568 Views
Last Modified: 2013-07-06
I want to open an elevated cmd while logged in to a standard user account. I'm using this command to open an elevated command-line. The user specified in the command is in the local admin group on my computer.

runas /user:DOMAIN\USER cmd.exe

The command prompts me to enter a password. Once I've entered the correct password, another instance of the command-line opens. Next, I use a command like net stop "service", but I get an Access Denied error.

Ultimately I want to use this command to run an automated batch script on accounts without admin rights, but I can't get the runas command to even open the cmd with elevated permissions.

OS: Windows 7 Pro 64-bit
Computer is connected to Domain
No GPO stopping this command
Secondary Logon Service - Started
0
Comment
Question by:sysadmin-inq
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 3
11 Comments
 
LVL 3

Expert Comment

by:CITG_Carl
ID: 39272490
When you opened CMD.exe did you 'Run as Administrator'?

Cheers
0
 

Author Comment

by:sysadmin-inq
ID: 39272551
Yes, I've tried that. It does not work sadly.

Maybe I should fill you in on my end goal here. I wrote a batch script that will open another script in an elevated environment. See below

runas /savecred /user:DOMAIN\USER "cmd.exe /C C:\Users\MYACCOUNT\Desktop\Script.bat

Open in new window


Script.bat contains another set of commands that require the cmd to be elevated.

I started testing these set of scripts under a local admin account as well. Just fyi

Thanks!!
0
 
LVL 3

Expert Comment

by:CITG_Carl
ID: 39272555
Why dont you run a scheduled task with the specified elevated credentials in that?
0
How Do You Stack Up Against Your Peers?

With today’s modern enterprise so dependent on digital infrastructures, the impact of major incidents has increased dramatically. Grab the report now to gain insight into how your organization ranks against your peers and learn best-in-class strategies to resolve incidents.

 

Author Comment

by:sysadmin-inq
ID: 39272594
@ CITG_Carl

I've also attempted that solution. It works for the most part, but I would like to use the Runas command. If I can't get the runas command to work then I'll cave and use the sched task

Thanks for throwing that in there
0
 
LVL 3

Expert Comment

by:CITG_Carl
ID: 39272638
Its not something to do with UAC is it? Ive just run it now on my laptop and UAC was causing an issue.

I have right clicked cmd.exe run as administrator

runas /user:DOMAIN\User cmd


Cheers
0
 

Author Comment

by:sysadmin-inq
ID: 39272658
@CITG_Carl

The computers that I will be running the script on must have UAC enabled.

I have tried right-clicking cmd.exe and choosing run as administrator, then I did the runas command, but the other cmd that opens is not running as elevated.

The problem is that the command line that opens as a result of the runas command is not opening as an elevated cmd.

Thanks!!
0
 

Author Comment

by:sysadmin-inq
ID: 39272693
I've also ran this command while UAC was disabled. I still get Access denied errors.

Thanks
0
 

Author Comment

by:sysadmin-inq
ID: 39272900
I've learned that the runas command can't be used to elevate cmd

0
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 39272956
runas command can't be used to elevate cmd Where did you read this?

HUH! I do that all of the time.. the domain\user may have to  be a member of the local administrators group which is not too difficult to implement via group policy.
0
 

Accepted Solution

by:
sysadmin-inq earned 0 total points
ID: 39272998
0
 

Author Closing Comment

by:sysadmin-inq
ID: 39303693
The posted link to the article explained that the Runas command in MS-DOS does not provide an elevated cmd when calling a batch file.

The scheduled tasks route is a good solution but will not work in my circumstance.

Thanks for all of your answers, but this time I found it myself.

Regards
0

Featured Post

Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question