#47526 - 2003-11-03 05:51 PM
Sanur help
|
MagicOO7
Lurker
Registered: 2003-10-21
Posts: 3
|
I'm trying to use the RUNAS command to run a batch file with admin rights and using Sanur.exe to pipe the password in. Whenever I test the script by running my login script from NETLOGON, it works. However, when I'm logging in and the login script fires automatically, it doesn't work. I've been able to get the RUNAS command work fine without the Sanur.exe part, where it will prompt me for a password during the login process. Any ideas??
Here's the runas command I'm using.
code:
SHELL '%COMSPEC% /c runas /env /user:VANACORE\Scripts "\\server1\netlogon\GamesXP.bat" | C:\sanur.exe Password'
And here's the batch file:
code:
CMD.exe /c "sysocmgr /i:%windir%\inf\sysoc.inf /u:c:\ocm.txt /q"
|
|
Top
|
|
|
|
#47529 - 2003-11-03 10:51 PM
Re: Sanur help
|
MagicOO7
Lurker
Registered: 2003-10-21
Posts: 3
|
Thanks for the feedback guys! I have spent the last 2 weeks going through the FAQ section on using SANUR with encryption. I don't understand why it runs if I go Start/Run \\Server1\netlogon\kix32 but it won't run correctly when I log in.
I'm not sure, MighyR1, what you are trying to tell me. Are you telling me that my syntax is incorrect? I admit I don't feel comfortable with the way I've used the quotes... could there be a problem in the quotes?
Also, I assure you, SeaLeopard, that I was using Kixcrpt.exe in the same manner as the examples in the FAQs. (I know that this method is still not 100% secure, but let's face it, no network connected to the internet is 100% hacker-proof.) I have just removed all encryption layers until I get the script to run properly in testing. I believe that to be the proper way to troubleshoot, am I not right? Why complicate the issue????
|
|
Top
|
|
|
|
|
#47534 - 2003-11-04 12:24 AM
Re: Sanur help
|
ShaneEP
MM club member
Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
|
If you are going to use runas technology...
I would suggest using the runas.exe found here...
http://www.anbsoftware.co.uk/netadmin/runas/download.php
It prevents having to call two different programs...It also includes the wonderful /w switch so that the script will wait until the program you run using runas is completed before proceeding.
Just my 2 cents worth.
|
|
Top
|
|
|
|
|
#47535 - 2003-11-04 01:40 AM
Re: Sanur help
|
MagicOO7
Lurker
Registered: 2003-10-21
Posts: 3
|
I agree with CitrixMan on sniffing the password when it's sent to the task scheduler... now if you were able to encrypt that too, that'd be a diff story.
I'll try the other Runas when I get into work tomorrow... it should at least help me feel more
comfortable about my quote usage.
|
|
Top
|
|
|
|
|
#47537 - 2003-11-04 02:09 AM
Re: Sanur help
|
ShaneEP
MM club member
Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
|
Perhaps...Perhaps...
Sounds like a good test for someone... ![[Big Grin]](images/icons/grin.gif)
|
|
Top
|
|
|
|
|
#47538 - 2003-11-04 02:36 AM
Re: Sanur help
|
Sealeopard
KiX Master
Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
|
Time to read up on Windows authentication?
IIRC, Windows only sends the hash of the password when authenticating, anyway, not the password itself. The password itself is stored nowhere, not even in the SAM.
IMHO, any install that uses- Microsoft Installer technology via GPO
- Task Scheduler from an admin workstation or scripts scheduled via Task Scheduler
- scripts that processes install requests and is run via Task Scheduler or as a service (e.g. KSMS)
- remote execution via WMI or other tools
are secure as they do not require a password stored anywhere. BTW, PSEXEC transmits the password in clear text and is thus susceptible to network sniffing.
[ 04. November 2003, 02:49: Message edited by: sealeopard ]
_________________________
There are two types of vessels, submarines and targets.
|
|
Top
|
|
|
|
|
#47539 - 2003-11-04 04:13 PM
Re: Sanur help
|
ShaneEP
MM club member
Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
|
Then I agree...Your methods are more secure. The problem is though that none of the options you listed...
quote:
Microsoft Installer technology via GPO
Task Scheduler from an admin workstation or scripts scheduled via Task Scheduler
scripts that processes install requests and is run via Task Scheduler or as a service (e.g. KSMS)
remote execution via WMI or other tools
Will work on NT4 and above without installing something on the client machines.
|
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
1 registered
(Allen)
and 1607 anonymous users online.
|
|
|
![[Eek!]](images/icons/shocked.gif){kind=icon}
![[Confused]](images/icons/confused.gif){kind=icon}
