WUGNET, the Windows User Group Network
Your Complete Resource Center for "The Best" in Shareware, Computing Tips and Support, Windows Industry News... and much more!
Home Forums Shareware Windows Tips Hot Offers FREE Newsletters Arcade Contact Us About Partners
Search WUGNET: RSS Feeds RSS Feeds Advertise with WUGNET    |    Shareware eBooks
HomeHome FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Running the explorer shell as Basic User

 
   Home -> Windows -> Security Admin RSS
Next:  Display Settings  
Author Message
ranit8

External


Since: May 12, 2009
Posts: 1



(Msg. 1) Posted: Tue May 12, 2009 3:24 pm
Post subject: Running the explorer shell as Basic User
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

I wanted to force applications to run by default without administrator
rights, from within an admin account. DropMyRights and SetSAFER dont do what
I want. MakeMeAdmin will not allow me to use the Run As... context menu, only
the specific shortcut.

So I'm forcing the shell to start as Basic User. I've enabled Basic User by
creating this reg value
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers]
"Levels"=dword:00020000

Next, I used the instructions at
http://msdn.microsoft.com/en-us/library/ms838576.aspx ro change the shell to
%SYSTEMROOT%\system32\runas.exe /trustlevel:"Basic User"
%SYSTEMROOT%\Explorer.exe
At first I changed it in HKLM but I only got a common Explorer window, no
taskbar and no desktop. So I made the change to HKCU.

The problem is that the shell lacks the SeShutdownPrivilege so I cant do
anything power-related from the start menu except logoff. Then I can shutdown
properly. Using the Power/Sleep on the keyboard works fine, but if I set them
to ask what to do, only the log off option is available. I added the Everyone
group and my User Account to the shutdown privilege at secpol.msc but no
effect.
Back to top
Login to vote
Display posts from previous:   
       Home -> Windows -> Security Admin All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum
Categories:
  Windows XP
 Windows Vista
 Windows Other
 Office
 Office Other
 Security
  • Home |
  • Shareware |
  • Windows Tips |
  • Hot Offers |
  • FREE Newsletters |
  • Arcade |
  • Forums |
  • eBooks |
  • About WUGNET |
  • Partners |
  • Contact

  • WUGNET Privacy Policy |
  • Link to WUGNET |
  • IT Support