(Msg. 1) Posted: Fri Jul 18, 2008 2:50 pm
Post subject: Launching specific program with elevated rights from standard user Add to elertz Archived from groups: microsoft>public>windows>vista>security (more info?)
Okay, here is the scenerio: There are several programs (games) that my
children want to run. However they are written so that they need to be
launched with elevated rights. I don't, however, want to grant admin rights
to their accounts so I find myself in either the "find a new game to play"
mode, or "okay let me come provide my login when prompted so you can run your
game logged on as you" mode.
What I'd like to do is set up a way that once I know a specific game is okay
(used loosely), to create a way to automatically provide admin credentials
when needed just for that application.
This sounded very intriguing. I could provide my credentials in the task,
and no-one would have access to the creds and if they tried to change the
task, it would ask for my login again.
Because I wanted to set up the task to run not as me, but from their
accounts I had to use the "whether or not the user is logged in" (differing
from the above article). Problem is, with this setting, it looks like the
task won't run interactively (with the currently active console).
Is there any way to make this work, or some other way to whitelist specific
applications for elevated rights without having to log in every time?
(Msg. 2) Posted: Fri Jul 18, 2008 5:59 pm
Post subject: RE: Launching specific program with elevated rights from standard user Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Sean Daniels trick is suited for programs that have access to many sensitive
files in the OS and Programs Folders.
Have you tried Vista’s Parental Control feature?
Control Panel\User Accounts and Family Safety\Parental Controls
--
oscar
....Right click is your best friend...
"Casey Moore" wrote:
> Okay, here is the scenerio: There are several programs (games) that my
> children want to run. However they are written so that they need to be
> launched with elevated rights. I don't, however, want to grant admin rights
> to their accounts so I find myself in either the "find a new game to play"
> mode, or "okay let me come provide my login when prompted so you can run your
> game logged on as you" mode.
>
> What I'd like to do is set up a way that once I know a specific game is okay
> (used loosely), to create a way to automatically provide admin credentials
> when needed just for that application.
>
> I found this article:
> http://sbs.seandaniel.com/2007/05/how-to-launch-program-always-elevated.html >
> This sounded very intriguing. I could provide my credentials in the task,
> and no-one would have access to the creds and if they tried to change the
> task, it would ask for my login again.
>
> Because I wanted to set up the task to run not as me, but from their
> accounts I had to use the "whether or not the user is logged in" (differing
> from the above article). Problem is, with this setting, it looks like the
> task won't run interactively (with the currently active console).
>
> Is there any way to make this work, or some other way to whitelist specific
> applications for elevated rights without having to log in every time?
(Msg. 3) Posted: Sat Jul 19, 2008 3:01 pm
Post subject: RE: Launching specific program with elevated rights from standard Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
"oscar" wrote:
> Sean Daniels trick is suited for programs that have access to many sensitive
> files in the OS and Programs Folders.
>
> Have you tried Vista’s Parental Control feature?
>
> Control Panel\User Accounts and Family Safety\Parental Controls
>
> --
> oscar >
> ...Right click is your best friend...
>
>
> "Casey Moore" wrote:
>
> > Okay, here is the scenerio: There are several programs (games) that my
> > children want to run. However they are written so that they need to be
> > launched with elevated rights. I don't, however, want to grant admin rights
> > to their accounts so I find myself in either the "find a new game to play"
> > mode, or "okay let me come provide my login when prompted so you can run your
> > game logged on as you" mode.
> >
> > What I'd like to do is set up a way that once I know a specific game is okay
> > (used loosely), to create a way to automatically provide admin credentials
> > when needed just for that application.
> >
> > I found this article:
> > http://sbs.seandaniel.com/2007/05/how-to-launch-program-always-elevated.html > >
> > This sounded very intriguing. I could provide my credentials in the task,
> > and no-one would have access to the creds and if they tried to change the
> > task, it would ask for my login again.
> >
> > Because I wanted to set up the task to run not as me, but from their
> > accounts I had to use the "whether or not the user is logged in" (differing
> > from the above article). Problem is, with this setting, it looks like the
> > task won't run interactively (with the currently active console).
> >
> > Is there any way to make this work, or some other way to whitelist specific
> > applications for elevated rights without having to log in every time?
(Msg. 4) Posted: Sat Jul 19, 2008 3:03 pm
Post subject: RE: Launching specific program with elevated rights from standard Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Yes, I am using the parental controls. I can limiit which programs they run,
but that doesn't fix the "elevated permissions" issue.
"oscar" wrote:
> Sean Daniels trick is suited for programs that have access to many sensitive
> files in the OS and Programs Folders.
>
> Have you tried Vista’s Parental Control feature?
>
> Control Panel\User Accounts and Family Safety\Parental Controls
>
> --
> oscar >
> ...Right click is your best friend...
>
>
> "Casey Moore" wrote:
>
> > Okay, here is the scenerio: There are several programs (games) that my
> > children want to run. However they are written so that they need to be
> > launched with elevated rights. I don't, however, want to grant admin rights
> > to their accounts so I find myself in either the "find a new game to play"
> > mode, or "okay let me come provide my login when prompted so you can run your
> > game logged on as you" mode.
> >
> > What I'd like to do is set up a way that once I know a specific game is okay
> > (used loosely), to create a way to automatically provide admin credentials
> > when needed just for that application.
> >
> > I found this article:
> > http://sbs.seandaniel.com/2007/05/how-to-launch-program-always-elevated.html > >
> > This sounded very intriguing. I could provide my credentials in the task,
> > and no-one would have access to the creds and if they tried to change the
> > task, it would ask for my login again.
> >
> > Because I wanted to set up the task to run not as me, but from their
> > accounts I had to use the "whether or not the user is logged in" (differing
> > from the above article). Problem is, with this setting, it looks like the
> > task won't run interactively (with the currently active console).
> >
> > Is there any way to make this work, or some other way to whitelist specific
> > applications for elevated rights without having to log in every time?
(Msg. 5) Posted: Sat Jul 19, 2008 6:10 pm
Post subject: Re: Launching specific program with elevated rights from standard Add to elertz [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
That's not the way Vista plays - UAC is a prrt of Vista just as SAM was a
part of earlier client versions.
There are ways to bridge the divide - it only takes a little research,
effort in the direction of establishing an environment that will suit the
game or allow it to work on an OS it was not designed to operate on.
Your options are several; off the tope of my head these are the most
obvious - to run the game in compatible mode, debug the code yourself, find
what is requiring elevated privileges - then fixing it or .... contact the
vendor, explain the problem and ask for an updated version of the software.
"Casey Moore" <CaseyMoore.TakeThisOut@discussions.microsoft.com> wrote in message
news:6A4CC930-E672-4A69-A4CA-FB81FF26BDF4@microsoft.com...
> Yes, I am using the parental controls. I can limiit which programs they
> run,
> but that doesn't fix the "elevated permissions" issue.
>
> "oscar" wrote:
>
>> Sean Daniels trick is suited for programs that have access to many
>> sensitive
>> files in the OS and Programs Folders.
>>
>> Have you tried Vista’s Parental Control feature?
>>
>> Control Panel\User Accounts and Family Safety\Parental Controls
>>
>> --
>> oscar >>
>> ...Right click is your best friend...
>>
>>
>> "Casey Moore" wrote:
>>
>> > Okay, here is the scenerio: There are several programs (games) that my
>> > children want to run. However they are written so that they need to be
>> > launched with elevated rights. I don't, however, want to grant admin
>> > rights
>> > to their accounts so I find myself in either the "find a new game to
>> > play"
>> > mode, or "okay let me come provide my login when prompted so you can
>> > run your
>> > game logged on as you" mode.
>> >
>> > What I'd like to do is set up a way that once I know a specific game is
>> > okay
>> > (used loosely), to create a way to automatically provide admin
>> > credentials
>> > when needed just for that application.
>> >
>> > I found this article:
>> > http://sbs.seandaniel.com/2007/05/how-to-launch-program-always-elevated.html >> >
>> > This sounded very intriguing. I could provide my credentials in the
>> > task,
>> > and no-one would have access to the creds and if they tried to change
>> > the
>> > task, it would ask for my login again.
>> >
>> > Because I wanted to set up the task to run not as me, but from their
>> > accounts I had to use the "whether or not the user is logged in"
>> > (differing
>> > from the above article). Problem is, with this setting, it looks like
>> > the
>> > task won't run interactively (with the currently active console).
>> >
>> > Is there any way to make this work, or some other way to whitelist
>> > specific
>> > applications for elevated rights without having to log in every time?
All times are: Eastern Time (US & Canada) (change)
Page 1 of 1
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Home
Forums
Home
FAQ
Search
Profile
Private Messages
Log in/Register/Password
Windows Vista