Launching specific program with elevated rights from standard user

Posted: 07-18-2008, 09:50 PM
Okay, here is the scenerio: There are several programs (games) that my
children want to run. However they are written so that they need to be
launched with elevated rights. I don't, however, want to grant admin rights
to their accounts so I find myself in either the "find a new game to play"
mode, or "okay let me come provide my login when prompted so you can run your
game logged on as you" mode.

What I'd like to do is set up a way that once I know a specific game is okay
(used loosely), to create a way to automatically provide admin credentials
when needed just for that application.

I found this article:
http://sbs.seandaniel.com/2007/05/ho...-elevated.html

This sounded very intriguing. I could provide my credentials in the task,
and no-one would have access to the creds and if they tried to change the
task, it would ask for my login again.

Because I wanted to set up the task to run not as me, but from their
accounts I had to use the "whether or not the user is logged in" (differing
from the above article). Problem is, with this setting, it looks like the
task won't run interactively (with the currently active console).

Is there any way to make this work, or some other way to whitelist specific
applications for elevated rights without having to log in every time?

Launching specific program with elevated rights from standard user


Responses to "Launching specific program with elevated rights from standard user"

oscar
Guest
Posts: n/a
 
RE: Launching specific program with elevated rights from standard user
Posted: 07-19-2008, 12:59 AM
Sean Daniels trick is suited for programs that have access to many sensitive
files in the OS and Programs Folders.

Have you tried Vista’s Parental Control feature?

Control Panel\User Accounts and Family Safety\Parental Controls

--
oscar

....Right click is your best friend...


"Casey Moore" wrote:
> Okay, here is the scenerio: There are several programs (games) that my
> children want to run. However they are written so that they need to be
> launched with elevated rights. I don't, however, want to grant admin rights
> to their accounts so I find myself in either the "find a new game to play"
> mode, or "okay let me come provide my login when prompted so you can run your
> game logged on as you" mode.
>
> What I'd like to do is set up a way that once I know a specific game is okay
> (used loosely), to create a way to automatically provide admin credentials
> when needed just for that application.
>
> I found this article:
> http://sbs.seandaniel.com/2007/05/ho...-elevated.html
>
> This sounded very intriguing. I could provide my credentials in the task,
> and no-one would have access to the creds and if they tried to change the
> task, it would ask for my login again.
>
> Because I wanted to set up the task to run not as me, but from their
> accounts I had to use the "whether or not the user is logged in" (differing
> from the above article). Problem is, with this setting, it looks like the
> task won't run interactively (with the currently active console).
>
> Is there any way to make this work, or some other way to whitelist specific
> applications for elevated rights without having to log in every time?
Casey Moore
Guest
Posts: n/a
 
RE: Launching specific program with elevated rights from standard
Posted: 07-19-2008, 10:01 PM


"oscar" wrote:
> Sean Daniels trick is suited for programs that have access to many sensitive
> files in the OS and Programs Folders.
>
> Have you tried Vista’s Parental Control feature?
>
> Control Panel\User Accounts and Family Safety\Parental Controls
>
> --
> oscar
>
> ...Right click is your best friend...
>
>
> "Casey Moore" wrote:
>
> > Okay, here is the scenerio: There are several programs (games) that my
> > children want to run. However they are written so that they need to be
> > launched with elevated rights. I don't, however, want to grant admin rights
> > to their accounts so I find myself in either the "find a new game to play"
> > mode, or "okay let me come provide my login when prompted so you can run your
> > game logged on as you" mode.
> >
> > What I'd like to do is set up a way that once I know a specific game is okay
> > (used loosely), to create a way to automatically provide admin credentials
> > when needed just for that application.
> >
> > I found this article:
> > http://sbs.seandaniel.com/2007/05/ho...-elevated.html
> >
> > This sounded very intriguing. I could provide my credentials in the task,
> > and no-one would have access to the creds and if they tried to change the
> > task, it would ask for my login again.
> >
> > Because I wanted to set up the task to run not as me, but from their
> > accounts I had to use the "whether or not the user is logged in" (differing
> > from the above article). Problem is, with this setting, it looks like the
> > task won't run interactively (with the currently active console).
> >
> > Is there any way to make this work, or some other way to whitelist specific
> > applications for elevated rights without having to log in every time?
Casey Moore
Guest
Posts: n/a
 
RE: Launching specific program with elevated rights from standard
Posted: 07-19-2008, 10:03 PM
Yes, I am using the parental controls. I can limiit which programs they run,
but that doesn't fix the "elevated permissions" issue.

"oscar" wrote:
> Sean Daniels trick is suited for programs that have access to many sensitive
> files in the OS and Programs Folders.
>
> Have you tried Vista’s Parental Control feature?
>
> Control Panel\User Accounts and Family Safety\Parental Controls
>
> --
> oscar
>
> ...Right click is your best friend...
>
>
> "Casey Moore" wrote:
>
> > Okay, here is the scenerio: There are several programs (games) that my
> > children want to run. However they are written so that they need to be
> > launched with elevated rights. I don't, however, want to grant admin rights
> > to their accounts so I find myself in either the "find a new game to play"
> > mode, or "okay let me come provide my login when prompted so you can run your
> > game logged on as you" mode.
> >
> > What I'd like to do is set up a way that once I know a specific game is okay
> > (used loosely), to create a way to automatically provide admin credentials
> > when needed just for that application.
> >
> > I found this article:
> > http://sbs.seandaniel.com/2007/05/ho...-elevated.html
> >
> > This sounded very intriguing. I could provide my credentials in the task,
> > and no-one would have access to the creds and if they tried to change the
> > task, it would ask for my login again.
> >
> > Because I wanted to set up the task to run not as me, but from their
> > accounts I had to use the "whether or not the user is logged in" (differing
> > from the above article). Problem is, with this setting, it looks like the
> > task won't run interactively (with the currently active console).
> >
> > Is there any way to make this work, or some other way to whitelist specific
> > applications for elevated rights without having to log in every time?
Beoweolf
Guest
Posts: n/a
 
Re: Launching specific program with elevated rights from standard
Posted: 07-20-2008, 01:10 AM
That's not the way Vista plays - UAC is a prrt of Vista just as SAM was a
part of earlier client versions.

There are ways to bridge the divide - it only takes a little research,
effort in the direction of establishing an environment that will suit the
game or allow it to work on an OS it was not designed to operate on.

Your options are several; off the tope of my head these are the most
obvious - to run the game in compatible mode, debug the code yourself, find
what is requiring elevated privileges - then fixing it or .... contact the
vendor, explain the problem and ask for an updated version of the software.


"Casey Moore" <CaseyMoore@discussions.microsoft.com> wrote in message
news:6A4CC930-E672-4A69-A4CA-FB81FF26BDF4@microsoft.com...
> Yes, I am using the parental controls. I can limiit which programs they
> run,
> but that doesn't fix the "elevated permissions" issue.
>
> "oscar" wrote:
>
>> Sean Daniels trick is suited for programs that have access to many
>> sensitive
>> files in the OS and Programs Folders.
>>
>> Have you tried Vista’s Parental Control feature?
>>
>> Control Panel\User Accounts and Family Safety\Parental Controls
>>
>> --
>> oscar
>>
>> ...Right click is your best friend...
>>
>>
>> "Casey Moore" wrote:
>>
>> > Okay, here is the scenerio: There are several programs (games) that my
>> > children want to run. However they are written so that they need to be
>> > launched with elevated rights. I don't, however, want to grant admin
>> > rights
>> > to their accounts so I find myself in either the "find a new game to
>> > play"
>> > mode, or "okay let me come provide my login when prompted so you can
>> > run your
>> > game logged on as you" mode.
>> >
>> > What I'd like to do is set up a way that once I know a specific game is
>> > okay
>> > (used loosely), to create a way to automatically provide admin
>> > credentials
>> > when needed just for that application.
>> >
>> > I found this article:
>> > http://sbs.seandaniel.com/2007/05/ho...-elevated.html
>> >
>> > This sounded very intriguing. I could provide my credentials in the
>> > task,
>> > and no-one would have access to the creds and if they tried to change
>> > the
>> > task, it would ask for my login again.
>> >
>> > Because I wanted to set up the task to run not as me, but from their
>> > accounts I had to use the "whether or not the user is logged in"
>> > (differing
>> > from the above article). Problem is, with this setting, it looks like
>> > the
>> > task won't run interactively (with the currently active console).
>> >
>> > Is there any way to make this work, or some other way to whitelist
>> > specific
>> > applications for elevated rights without having to log in every time?
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Can I install a program with a standard user? codefuns Windows Vista Security 4 12-23-2007 01:10 AM
Admin Rights and Standard Users Riley Windows Vista Administration 0 05-01-2007 11:18 PM
Permitting a specific exe to run in standard user mode. Philip Roberts Windows Vista Security 17 02-26-2007 12:19 AM
Launching a program when user launches remote desktop connection Myschif Windows XP Work Remotely 1 08-21-2006 08:58 PM
Favorites : only standard IE icon : no specific ones ! Why ? Pivert Customize Windows XP 2 08-16-2003 10:27 PM