Thanks--that's what I do but could never work out how to get a single
instance of a network connection(wireless or wired etc) to open with the
req'd privileges. How do you do that with cmd? These are not .cpl but
(according to Aaron from the site) stubs which 'call the ShellExecuteEx API
to launch an item in the shell namespace, which appears as a folder within
Explorer.'
Same for printers and faxes.
This is where the 'bunch of crap' comes from that Derick mentioned.
As for Jason's suggestion, I just seem to get stuck, which may be pointing
to something wrong with iexplore on my machine, as it hangs when I try to go
into local area connection etc. However, everything else is accessible.
-----Original Message-----
From: rpm@interworx.ca [mailto:rpm@interworx.ca]
Sent: Wednesday, September 14, 2005 3:30 AM
To: Murad Talukdar; focus-ms@securityfocus.com
Subject: RE: runas vs network connections etc etc....
The supplied link and the solution of running explorer.exe seems like an
excessive effort for something that can be done easily. I usually just
do a runas for cmd.exe. Then I can launch the majority of the control
panel applets by using the .cpl, you just need to type in the name on
the command line. Additionally you can do the same thing for .msc
files. If you don't know the names, look in your system32 directory for
*.cpl.
To answer you query regarding the network connections, you can run
ncpa.cpl. As for printers, you can use the method described below.
If you really want to get to control panel, I usually start Internet
Explorer from the same instance of cmd.exe (x:\Program Files\Internet
Explorer\iexplore.exe) and type Control Panel in the address bar.
HTH.
R.
-----Original Message-----
From: Murad Talukdar [mailto:talukdar_m@subway.com]
Sent: Monday, September 12, 2005 1:42 AM
To: focus-ms@securityfocus.com
Subject: runas vs network connections etc etc....
Hi all,
I have been trying to work out how to runas admin for several
different special folders eg network connections and printers
and faxes etc and following the advice about opening separate
processes given here;
http://blogs.msdn.com/aaron_margosis/archive/2004/07/07/175488.aspx
have found it a workaround.
Is this ideal? As far as I can see it works.
What do others do to get privileges when needed for these
essentials? This can be a real problem when it comes to
troubleshooting users machines and this is the best 'fix' I
have come across.
Kind Regards
Murad Talukdar
I do RunAs of IE for non-Admin Tools/MMC stuff which lets me do nearly
everything I want to pretty easily. The only hard part is Scheduled
Tasks: it seems to use some convoluted GUID-filled path (see the
shortcut target for it) rather than being an actual executable. It looks
like this:
%SystemRoot%\explorer.exe [bunch of crap]
So I take [bunch of crap] and put it in IE's address bar and I get
Scheduled Tasks. That took me a bit to figure out.
I've not found anything that can't be RunAs'ed so far but there are some
gotchas and programs that won't run from the command line using runas so
you have to get creative. And if I'm doing something mission critical or
fixing a time-sensitive problem, I log in as Administrator to prevent
frustration and mistakes.
Derick Anderson
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
