Jump to content

Starting a process under a different user without supplying thepassword


Recommended Posts

Guest Saqib Ali
Posted

As a I administrator can I launch processes on behalf of other users

without supplying their passwords?

 

I know psexec can launch processes on behalf of other users, but I

have to supply the user's credentials......

 

saqib

http://www.quantumcrypto.de/dante/

  • Replies 6
  • Created
  • Last Reply
Guest Danny Sanders
Posted

Re: Starting a process under a different user without supplying the password

 

Re: Starting a process under a different user without supplying the password

 

> As a I administrator can I launch processes on behalf of other users

> without supplying their passwords?

 

I am not aware of a way to do this.

 

hth

DDS

 

"Saqib Ali" <docbook.xml@gmail.com> wrote in message

news:cd643424-017b-47d7-9507-2f88dd91932a@d4g2000prg.googlegroups.com...

> As a I administrator can I launch processes on behalf of other users

> without supplying their passwords?

>

> I know psexec can launch processes on behalf of other users, but I

> have to supply the user's credentials......

>

> saqib

> http://www.quantumcrypto.de/dante/

Guest Pegasus \(MVP\)
Posted

Re: Starting a process under a different user without supplying the password

 

Re: Starting a process under a different user without supplying the password

 

 

"Saqib Ali" <docbook.xml@gmail.com> wrote in message

news:cd643424-017b-47d7-9507-2f88dd91932a@d4g2000prg.googlegroups.com...

> As a I administrator can I launch processes on behalf of other users

> without supplying their passwords?

>

> I know psexec can launch processes on behalf of other users, but I

> have to supply the user's credentials......

>

> saqib

> http://www.quantumcrypto.de/dante/

 

No, you can't.

Guest Anteaus
Posted

Re: Starting a process under a different user without supplying th

 

Re: Starting a process under a different user without supplying th

 

You can do this with AutoIt

 

RunAsSet("username","domain","password")

Run("commandline")

RunAsSet()

 

http://autoitscript.com

 

If you compile with encryption, that makes the password reasonably secure.

Guest Pegasus \(MVP\)
Posted

Re: Starting a process under a different user without supplying th

 

Re: Starting a process under a different user without supplying th

 

 

"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message

news:303D9302-9115-4C66-85E3-89EABA15522E@microsoft.com...

> You can do this with AutoIt

>

> RunAsSet("username","domain","password")

> Run("commandline")

> RunAsSet()

>

> http://autoitscript.com

>

> If you compile with encryption, that makes the password reasonably secure.

>

 

The OP wanted to do this without supplying the user's credentials.

Your process DOES require these credentials. Furthermore it is

a classical Trojan process: Anyone who gets a copy of your proposed

routine can use (abuse?) it to execute "commandline", regardless of

what hides behind this "commandline".

Guest Anteaus
Posted

Re: Starting a process under a different user without supplying th

 

Re: Starting a process under a different user without supplying th

 

"Pegasus (MVP)" wrote:

> The OP wanted to do this without supplying the user's credentials.

> Your process DOES require these credentials.

 

I would take it he means "Not supply them manually, ad nauseam." - That is

the sensible interpretation.

> Furthermore it is a classical Trojan process:

 

So you reckon the OP is a malware author?

Guest Pegasus \(MVP\)
Posted

Re: Starting a process under a different user without supplying th

 

Re: Starting a process under a different user without supplying th

 

 

"Anteaus" <Anteaus@discussions.microsoft.com> wrote in message

news:D1917065-2223-4079-A7DF-0FBB91835645@microsoft.com...

> "Pegasus (MVP)" wrote:

>

>> Furthermore it is a classical Trojan process:

>

> So you reckon the OP is a malware author?

>

 

No, not at all. I'm saying that in using your tool, the OP

gives his users a tool that can easily be used for unauthorised

access.


×
×
  • Create New...