Starting a process under a different user without supplying thepassword

S

Saqib Ali

As a I administrator can I launch processes on behalf of other users
without supplying their passwords?

I know psexec can launch processes on behalf of other users, but I
have to supply the user's credentials......

saqib
http://www.quantumcrypto.de/dante/
 
D

Danny Sanders

Re: Starting a process under a different user without supplying the password

> As a I administrator can I launch processes on behalf of other users
> without supplying their passwords?


I am not aware of a way to do this.

hth
DDS

"Saqib Ali" <docbook.xml@gmail.com> wrote in message
news:cd643424-017b-47d7-9507-2f88dd91932a@d4g2000prg.googlegroups.com...
> As a I administrator can I launch processes on behalf of other users
> without supplying their passwords?
>
> I know psexec can launch processes on behalf of other users, but I
> have to supply the user's credentials......
>
> saqib
> http://www.quantumcrypto.de/dante/
 
P

Pegasus \(MVP\)

Re: Starting a process under a different user without supplying the password

"Saqib Ali" <docbook.xml@gmail.com> wrote in message
news:cd643424-017b-47d7-9507-2f88dd91932a@d4g2000prg.googlegroups.com...
> As a I administrator can I launch processes on behalf of other users
> without supplying their passwords?
>
> I know psexec can launch processes on behalf of other users, but I
> have to supply the user's credentials......
>
> saqib
> http://www.quantumcrypto.de/dante/


No, you can't.
 
A

Anteaus

Re: Starting a process under a different user without supplying th

You can do this with AutoIt

RunAsSet("username","domain","password")
Run("commandline")
RunAsSet()

http://autoitscript.com

If you compile with encryption, that makes the password reasonably secure.
 
P

Pegasus \(MVP\)

Re: Starting a process under a different user without supplying th

"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message
news:303D9302-9115-4C66-85E3-89EABA15522E@microsoft.com...
> You can do this with AutoIt
>
> RunAsSet("username","domain","password")
> Run("commandline")
> RunAsSet()
>
> http://autoitscript.com
>
> If you compile with encryption, that makes the password reasonably secure.
>


The OP wanted to do this without supplying the user's credentials.
Your process DOES require these credentials. Furthermore it is
a classical Trojan process: Anyone who gets a copy of your proposed
routine can use (abuse?) it to execute "commandline", regardless of
what hides behind this "commandline".
 
A

Anteaus

Re: Starting a process under a different user without supplying th

"Pegasus (MVP)" wrote:

> The OP wanted to do this without supplying the user's credentials.
> Your process DOES require these credentials.


I would take it he means "Not supply them manually, ad nauseam." - That is
the sensible interpretation.

> Furthermore it is a classical Trojan process:


So you reckon the OP is a malware author?
 
P

Pegasus \(MVP\)

Re: Starting a process under a different user without supplying th

"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message
news:D1917065-2223-4079-A7DF-0FBB91835645@microsoft.com...
> "Pegasus (MVP)" wrote:
>
>> Furthermore it is a classical Trojan process:

>
> So you reckon the OP is a malware author?
>


No, not at all. I'm saying that in using your tool, the OP
gives his users a tool that can easily be used for unauthorised
access.
 
Back
Top Bottom