Page 2 of 2 <12
Topic Options
#73776 - 2003-03-03 04:37 AM Re: RUNAS
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
However, this is the main problem with the RUNAS and SU executables. They require some type of plain-text password provision in order to function correctly. This violates pretty much any security rule.

Therefore, at least on this board, the recommended ways to perform actions under administrative privileges are to utilize kiXCrypt or the Task Scheduler and remote scripting. These approaches do not expose passwords in plain text. For more infor, see for example the FAQ Forum under Installing an Application as an Admin
_________________________
There are two types of vessels, submarines and targets.

Top
#73777 - 2003-03-06 01:51 AM Re: RUNAS
ShaneEP Moderator Offline
MM club member
*****

Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK
You can try using AutoIT scripting. Comes with compiler to make it into password protected EXE as well. Heres a short example used to install the citrix web client.

code:
 
OS:
SetEnv, OS, %A_OSVERSION%
IfInString, OS, XP, Goto, RUNAS
IfInString, OS, 2000, Goto, RUNAS
IfInString, OS, NT4, Goto, JUSTRUN
IfInString, OS, 95, Goto, JUSTRUN
IfInString, OS, 98, Goto, JUSTRUN
IfInString, OS, ME, Goto, JUSTRUN
MsgBox,0,AutoIt,OS detection failed.
Exit

RUNAS:
SplashTextOn,300,150,ICA Update,Your ICA client is now being updated...Please be patient.
Run, runas /user:domain\\Admin "ica32t.exe"
Sleep, 1000
Send, password{ENTER}
BlockInput,on
WinWaitActive,Citrix ICA Web Client,Setup completed
Exit

JUSTRUN:
BlockInput,on
Run, ica32t.exe
WinWaitActive,Citrix ICA Web Client,Setup completed
Exit

[ADLIB]
Citrix ICA Web Client,The source file, Send,!y
Citrix ICA Web Client,The system needs to be restarted,Send,!n
ICA,Are you sure you want to cancel,send,n
Security Warning,,send,y


Top
#73778 - 2004-04-16 05:20 PM Re: RUNAS
burnsc Offline
Starting to like KiXtart

Registered: 2004-04-14
Posts: 171
Was just drudgeing around in the history. I realize this has been out for a while. A solution could be crafted by learning from the way NT handles passwords. The password that is placed in the scriot could be put there in a form that has a reversable decryption method. This way the real password is not shown, but the core data is there.
Top
#73779 - 2004-04-27 01:56 AM Re: RUNAS
ipeter Offline
Lurker

Registered: 2004-04-27
Posts: 3
There was not mentioned utility cpau (Create Process As User), see http://www.jsiinc.com/SUBO/tip7200/rh7258.htm
or home page http://www.joeware.net/win32/

Top
Page 2 of 2 <12


Moderator:  Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 320 anonymous users online.
Newest Members
ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder, M_Moore
17887 Registered Users

Generated in 0.046 seconds in which 0.012 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org