I'm working on my systems without admin rights, but I'd like to start sysinternals process explorer as full admin to have some debug access on my machine.
Right now I run procexp.exe with parameter /e, which prompts me for admin credentials.
Of course I could use runas, but for this I would need to put my admin passwort in clear text in the corresponding batch file, which is something I don't like to do.
Is there a way to tell windows that this one procexp.exe is allowed to run as admin without needing to enter the credentials?
In Unix systems this is done using setuid (or setgid), but how can I achieve this functionality in windows?
Answer
I found an answer on Stackoverflow, which works for me:
runas (at least on xp sp3) has option "/savecred" - it asks for password the first time and then it uses stored one (even after reboot).
You need to be aware that this is a security problem, though: after you ran /savecred once, every executable can execute itself with these saved credentials without any problems!!
Comments
Post a Comment