Results 1 to 5 of 5
  1. #1
    New Lounger
    Join Date
    Feb 2002
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Gaining Administrator Level Access

    I am not a Windows programmer, but I can find my way around the API when necessary.

    I have a client who wants to kickoff a process that installs a small piece of software on a user's local Win NT workstation. The users do not have access to the Administrator account (which is required to install new sottware), so I want to know if the process could gain Administrator access if it was given the Administrator account and password for the local machine. If the process needs to restart the OS that's acceptable, but not optimal. I do want to make sure that the user would not have access to the login information.

    Is any of this possible or feasible?

  2. #2
    2 Star Lounger
    Join Date
    Apr 2001
    Location
    Des Moines, Iowa
    Posts
    180
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Gaining Administrator Level Access

    I don't know about NT4, I haven't used it in years, but with 2k or XP there is the command "runas". This lets a process run under a user account other than the logged on user. Probably not what you are looking for, but maybe it will lead to something helpful.

  3. #3
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Gaining Administrator Level Access

    The security model in the NT platform is designed to prevent just this sort of thing, so I don't think a workaround is going to be found. I don't want to sound sanctimonious but presumably the machine's administrator doesn't want software installed without their knowledge.

    If it's a case of a lost admin password, you can turn to l0pht, which is prohibitively expensive for what you want to accomplish, or a reinstall of Windows.
    -Mark

  4. #4
    New Lounger
    Join Date
    Feb 2002
    Posts
    9
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Gaining Administrator Level Access

    I think I can avoid sanctimoy. It is the Machine Administrators who are my client and who are the ones who are giving me the Admin Password. They just want a more seamless way of installing this new software that they have.

    It has been suggested that the SA.EXE tool that comes with the Resource Kit will do the trick and some quick investigation on my part appears to bear this out.

  5. #5
    4 Star Lounger
    Join Date
    Aug 2002
    Location
    Dallas, Texas, USA
    Posts
    594
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Gaining Administrator Level Access

    If the tool from the Resource kit works, go for it. The other two options are to use the RunAs (It may accept command line arguments, never bothered to check), or the more pain in the @55 method is to create and use a security token within your programming. Complete pain, and I personally have never completely finished the process of doing such, I have only used portions of it for various tasks.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •