Tech Support > Microsoft Windows > Starting a process under a different user without supplying thepassword
Starting a process under a different user without supplying thepassword
Posted by Saqib Ali on November 28th, 2007


As a I administrator can I launch processes on behalf of other users
without supplying their passwords?

I know psexec can launch processes on behalf of other users, but I
have to supply the user's credentials......

saqib
http://www.quantumcrypto.de/dante/

Posted by Danny Sanders on November 28th, 2007


I am not aware of a way to do this.

hth
DDS

"Saqib Ali" <docbook.xml@gmail.com> wrote in message
news:cd643424-017b-47d7-9507-2f88dd91932a@d4g2000prg.googlegroups.com...


Posted by Pegasus \(MVP\) on November 28th, 2007



"Saqib Ali" <docbook.xml@gmail.com> wrote in message
news:cd643424-017b-47d7-9507-2f88dd91932a@d4g2000prg.googlegroups.com...
No, you can't.



Posted by Anteaus on December 2nd, 2007


You can do this with AutoIt

RunAsSet("username","domain","password")
Run("commandline")
RunAsSet()

http://autoitscript.com

If you compile with encryption, that makes the password reasonably secure.

Posted by Pegasus \(MVP\) on December 2nd, 2007



"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message
news:303D9302-9115-4C66-85E3-89EABA15522E@microsoft.com...
The OP wanted to do this without supplying the user's credentials.
Your process DOES require these credentials. Furthermore it is
a classical Trojan process: Anyone who gets a copy of your proposed
routine can use (abuse?) it to execute "commandline", regardless of
what hides behind this "commandline".



Posted by Anteaus on December 2nd, 2007


"Pegasus (MVP)" wrote:

I would take it he means "Not supply them manually, ad nauseam." - That is
the sensible interpretation.

So you reckon the OP is a malware author?





Posted by Pegasus \(MVP\) on December 2nd, 2007



"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message
news1917065-2223-4079-A7DF-0FBB91835645@microsoft.com...
No, not at all. I'm saying that in using your tool, the OP
gives his users a tool that can easily be used for unauthorised
access.




Similar Posts