PDA

View Full Version : Need Admin rights to delete many spywares



lelton
2007-10-13, 04:36
Hi, my home XP machine has a number of user accounts, many of them restricted (Kids, etc..), but I still want the restricted users to be able to Update and Run spybot without and difficulties. I am training them to remove there own Spyware without calling Dad.

In the past, when the machine was heavily infested, I would *NEED* to grant that user Admin rights, relogin as that user, then update/scan/delete spyware with my new admin rights for everything to be deleted.

I have recently found a much easier and quicker way.

While running as the infested user, Right click on the Spybot shortcut and choose "Run As.." then input your administrator password.

This works great, but essentially is a manual only process to get Spybot into admin mode, it requires my manual intervention !

Is there any way that I can permanently give Admin rights to this application, not mater what user is running it ? I'm kind-of looking for a way that the Right-C
lick, run as administrator function can be saved permanent.

This is an XP environment and I have no intentions of changing to Vista, at least not right now as over 2/3 of my accounting applications will stop running !

Any ideas ?

Les Elton

InfotechCapital
2007-10-14, 18:45
Sure--it's an option for RunAs: add the /savecred option to your shortcut. Note that it will not function for "XP Home" (see below). If this is the case for you, and you're not willing to use XP Pro (which has its own benefits) we'll look for a different solution.


C:\>runas /?

RUNAS USAGE:

RUNAS [ [/noprofile | /profile] [/env] [/netonly] ]
/user:<UserName> program

RUNAS [ [/noprofile | /profile] [/env] [/netonly] ]
/smartcard [/user:<UserName>] program

/noprofile specifies that the user's profile should not be loaded.
This causes the application to load more quickly, but
can cause some applications to malfunction.
/profile specifies that the user's profile should be loaded.
This is the default.
/env to use current environment instead of user's.
/netonly use if the credentials specified are for remote
access only.
/savecred to use credentials previously saved by the user.
This option is not available on Windows XP Home Edition
and will be ignored.
/smartcard use if the credentials are to be supplied from a
smartcard.
/user <UserName> should be in form USER@DOMAIN or DOMAIN\USER
program command line for EXE. See below for examples

Examples:
> runas /noprofile /user:mymachine\administrator cmd
> runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"
> runas /env /user:user@domain.microsoft.com "notepad \"my file.txt\""

NOTE: Enter user's password only when prompted.
NOTE: USER@DOMAIN is not compatible with /netonly.
NOTE: /profile is not compatible with /netonly.