Launching specific program with elevated rights from standard user

[Guest Casey Moore]

Okay, here is the scenerio: There are several programs (games) that my

children want to run. However they are written so that they need to be

launched with elevated rights. I don't, however, want to grant admin rights

to their accounts so I find myself in either the "find a new game to play"

mode, or "okay let me come provide my login when prompted so you can run your

game logged on as you" mode.

 

What I'd like to do is set up a way that once I know a specific game is okay

(used loosely), to create a way to automatically provide admin credentials

when needed just for that application.

 

I found this article:

http://sbs.seandaniel.com/2007/05/how-to-l...s-elevated.html

 

This sounded very intriguing. I could provide my credentials in the task,

and no-one would have access to the creds and if they tried to change the

task, it would ask for my login again.

 

Because I wanted to set up the task to run not as me, but from their

accounts I had to use the "whether or not the user is logged in" (differing

from the above article). Problem is, with this setting, it looks like the

task won't run interactively (with the currently active console).

 

Is there any way to make this work, or some other way to whitelist specific

applications for elevated rights without having to log in every time?

[Guest oscar]

Sean Daniels trick is suited for programs that have access to many sensitive

files in the OS and Programs Folders.

 

Have you tried Vista’s Parental Control feature?

 

Control Panel\User Accounts and Family Safety\Parental Controls

 

--

oscar style_emoticons/

 

....Right click is your best friend...

 

 

"Casey Moore" wrote:

<span style="color:blue">

> Okay, here is the scenerio: There are several programs (games) that my

> children want to run. However they are written so that they need to be

> launched with elevated rights. I don't, however, want to grant admin rights

> to their accounts so I find myself in either the "find a new game to play"

> mode, or "okay let me come provide my login when prompted so you can run your

> game logged on as you" mode.

>

> What I'd like to do is set up a way that once I know a specific game is okay

> (used loosely), to create a way to automatically provide admin credentials

> when needed just for that application.

>

> I found this article:

> http://sbs.seandaniel.com/2007/05/how-to-l...s-elevated.html

>

> This sounded very intriguing. I could provide my credentials in the task,

> and no-one would have access to the creds and if they tried to change the

> task, it would ask for my login again.

>

> Because I wanted to set up the task to run not as me, but from their

> accounts I had to use the "whether or not the user is logged in" (differing

> from the above article). Problem is, with this setting, it looks like the

> task won't run interactively (with the currently active console).

>

> Is there any way to make this work, or some other way to whitelist specific

> applications for elevated rights without having to log in every time?</span>

[Guest Casey Moore]

RE: Launching specific program with elevated rights from standard

 

"oscar" wrote:

<span style="color:blue">

> Sean Daniels trick is suited for programs that have access to many sensitive

> files in the OS and Programs Folders.

>

> Have you tried Vista’s Parental Control feature?

>

> Control PanelUser Accounts and Family SafetyParental Controls

>

> --

> oscar style_emoticons/

>

> ...Right click is your best friend...

>

>

> "Casey Moore" wrote:

> <span style="color:green">

> > Okay, here is the scenerio: There are several programs (games) that my

> > children want to run. However they are written so that they need to be

> > launched with elevated rights. I don't, however, want to grant admin rights

> > to their accounts so I find myself in either the "find a new game to play"

> > mode, or "okay let me come provide my login when prompted so you can run your

> > game logged on as you" mode.

> >

> > What I'd like to do is set up a way that once I know a specific game is okay

> > (used loosely), to create a way to automatically provide admin credentials

> > when needed just for that application.

> >

> > I found this article:

> > http://sbs.seandaniel.com/2007/05/how-to-l...s-elevated.html

> >

> > This sounded very intriguing. I could provide my credentials in the task,

> > and no-one would have access to the creds and if they tried to change the

> > task, it would ask for my login again.

> >

> > Because I wanted to set up the task to run not as me, but from their

> > accounts I had to use the "whether or not the user is logged in" (differing

> > from the above article). Problem is, with this setting, it looks like the

> > task won't run interactively (with the currently active console).

> >

> > Is there any way to make this work, or some other way to whitelist specific

> > applications for elevated rights without having to log in every time?</span></span>

[Guest Casey Moore]

RE: Launching specific program with elevated rights from standard

 

Yes, I am using the parental controls. I can limiit which programs they run,

but that doesn't fix the "elevated permissions" issue.

 

"oscar" wrote:

<span style="color:blue">

> Sean Daniels trick is suited for programs that have access to many sensitive

> files in the OS and Programs Folders.

>

> Have you tried Vista’s Parental Control feature?

>

> Control PanelUser Accounts and Family SafetyParental Controls

>

> --

> oscar style_emoticons/

>

> ...Right click is your best friend...

>

>

> "Casey Moore" wrote:

> <span style="color:green">

> > Okay, here is the scenerio: There are several programs (games) that my

> > children want to run. However they are written so that they need to be

> > launched with elevated rights. I don't, however, want to grant admin rights

> > to their accounts so I find myself in either the "find a new game to play"

> > mode, or "okay let me come provide my login when prompted so you can run your

> > game logged on as you" mode.

> >

> > What I'd like to do is set up a way that once I know a specific game is okay

> > (used loosely), to create a way to automatically provide admin credentials

> > when needed just for that application.

> >

> > I found this article:

> > http://sbs.seandaniel.com/2007/05/how-to-l...s-elevated.html

> >

> > This sounded very intriguing. I could provide my credentials in the task,

> > and no-one would have access to the creds and if they tried to change the

> > task, it would ask for my login again.

> >

> > Because I wanted to set up the task to run not as me, but from their

> > accounts I had to use the "whether or not the user is logged in" (differing

> > from the above article). Problem is, with this setting, it looks like the

> > task won't run interactively (with the currently active console).

> >

> > Is there any way to make this work, or some other way to whitelist specific

> > applications for elevated rights without having to log in every time?</span></span>

[Guest Beoweolf]

Re: Launching specific program with elevated rights from standard

 

That's not the way Vista plays - UAC is a prrt of Vista just as SAM was a

part of earlier client versions.

 

There are ways to bridge the divide - it only takes a little research,

effort in the direction of establishing an environment that will suit the

game or allow it to work on an OS it was not designed to operate on.

 

Your options are several; off the tope of my head these are the most

obvious - to run the game in compatible mode, debug the code yourself, find

what is requiring elevated privileges - then fixing it or .... contact the

vendor, explain the problem and ask for an updated version of the software.

 

 

"Casey Moore" <CaseyMoore@discussions.microsoft.com> wrote in message

news:6A4CC930-E672-4A69-A4CA-FB81FF26BDF4@microsoft.com...<span style="color:blue">

> Yes, I am using the parental controls. I can limiit which programs they

> run,

> but that doesn't fix the "elevated permissions" issue.

>

> "oscar" wrote:

><span style="color:green">

>> Sean Daniels trick is suited for programs that have access to many

>> sensitive

>> files in the OS and Programs Folders.

>>

>> Have you tried Vista’s Parental Control feature?

>>

>> Control PanelUser Accounts and Family SafetyParental Controls

>>

>> --

>> oscar style_emoticons/

>>

>> ...Right click is your best friend...

>>

>>

>> "Casey Moore" wrote:

>><span style="color:darkred">

>> > Okay, here is the scenerio: There are several programs (games) that my

>> > children want to run. However they are written so that they need to be

>> > launched with elevated rights. I don't, however, want to grant admin

>> > rights

>> > to their accounts so I find myself in either the "find a new game to

>> > play"

>> > mode, or "okay let me come provide my login when prompted so you can

>> > run your

>> > game logged on as you" mode.

>> >

>> > What I'd like to do is set up a way that once I know a specific game is

>> > okay

>> > (used loosely), to create a way to automatically provide admin

>> > credentials

>> > when needed just for that application.

>> >

>> > I found this article:

>> > http://sbs.seandaniel.com/2007/05/how-to-l...s-elevated.html

>> >

>> > This sounded very intriguing. I could provide my credentials in the

>> > task,

>> > and no-one would have access to the creds and if they tried to change

>> > the

>> > task, it would ask for my login again.

>> >

>> > Because I wanted to set up the task to run not as me, but from their

>> > accounts I had to use the "whether or not the user is logged in"

>> > (differing

>> > from the above article). Problem is, with this setting, it looks like

>> > the

>> > task won't run interactively (with the currently active console).

>> >

>> > Is there any way to make this work, or some other way to whitelist

>> > specific

>> > applications for elevated rights without having to log in every time? </span></span></span>