SC w/ limited user accounts?

[cgallery]

From time to time I run into a user that is running in limited user mode. SC won't work in this case. And I guess that makes sense, as a limited user should not be able to download and run an app that gives someone else access to the PC.

I could have them RunAs and give them an admin password, but that would sorta defeat the entire purpose (they'd use the password for other stuff I don't want them fidding with).

Anyway, anyone deal with issues like this? Have any suggestions?

[ssx4life]

seems impossible.

I ran SC with limited credentials in the past under XP / Vista. What OS are you talking about?

[JDaus]

I could have them RunAs and give them an admin password

i have a little "yts_runas.exe" that i created for a similar purpose to this ... it is still in testing and development, and you may need to be a bit creative to use it in your own environment, but it should at least help you out.

do you have the file on the persons computer already, is it in a closed WAN/LAN network, anymore info you could give out would be good (without revealing critical infos) ...

i will PM you the autoit code that i have, so that you can have a play around, and see how you go ... at the moment the username/password is hard coded into it, but i am looking at ways of encoding this into an INI ... for a little more flexability (and security).

[JDaus]

i will PM you the autoit code that i have, so that you can have a play around

Might as well just post the core of the code here ... not much to it really ...

Code: Select all

$oMyError = ObjEvent("AutoIt.Error", "MyErrFunc"); Install a custom error handler
; Init objects
Const $ADS_UF_DONT_EXPIRE_PASSWD = 0X10000
Const $ADS_UF_PASSWD_CANT_CHANGE = 0X40
Global $V2M_EventDisplay, $DebugLevel = 10
$AppIni = @ScriptDir & "\yts_runas.ini"		;can be a network drive if you want ... needs to be readable by user ...
$UserName = "YTS_RunAs"		;change to your admin username
$Password = "YTS_RunAsPassword"	;change to your admin password

If IniRead($AppIni, "Common", "INIVersion", "") = "" Then
	MsgBox(0, "New Setup", "Please edit the INI (" & $AppIni & ") to setup the app you wish to launch", 10)
	IniWrite($AppIni, "Common", "INIVersion", "1")
	IniWrite($AppIni, "App", "Name_1", "")
	IniWrite($AppIni, "App", "Dir_1", "")
	IniWrite($AppIni, "App", "EXE_1", "")
	RunWait(@ComSpec & " /C notepad.exe " & $AppIni, @ScriptDir)

Else
	RunAs($UserName, "", $Password, 4, IniRead($AppIni, "App", "Dir_1", "") & "" & IniRead($AppIni, "App", "EXE_1", ""), IniRead($AppIni, "App", "Dir_1", ""))
	Sleep(5000)
EndIf

to use this,

• 1) change the username & password to suite your needs
  2) Run the script to create the INI and open it for editing (in notepad)
  3) fill in the INI details as needed...
  4) test the script by running again, then compile if all is well

enjoy