Multiple user with different rights
I am running server 03 and 08. I have many clients running XP. I have restricted these clients so they are unable to get to anything on the network. When I sit down to work on a PC, it would be nice to access resources that are not permitted to these users. I currently have to remote into my PC or logout and login as an admin. I would be fine to be required to enter credentials when I access one of the servers that the limited users do not have access to. Any help would be greatly appreciated.
Software/Hardware used:
Server 03, 08
Software/Hardware used:
Server 03, 08
ASKED:
April 15, 2011 9:12 PM
UPDATED:
May 2, 2011 11:15 PM
Answer Wiki:
It's hard to be more specific without knowing exactly what you want to access from their computers...programs...files on the PC...network shares...? But, I'll try and cover a couple of scenarios for you:
In order to run programs, you can right-click the program and select 'run as' in order to supply alternate credentials.
Otherwise, you can go to a command prompt and use the 'runas' command to access files, network shares, etc. For instance, 'runas /user:domainspecialuser "cmd" ' will prompt for the password of the user you supply in the command, and then run an elevated command prompt. From that command prompt you can use various commands such as 'net use [letter]: \mynetworkserverrestrictedshare' to gain access to restricted parts of your network. Then, you can use the 'start' command to open the restricted files.
To see all answers submitted to the Answer Wiki: View Answer History.
According to ur Q, it is not fully clear to me ! hope other member will understand…. actually, why u want to do like this; what is the cause behind it….
Sorry for the general post, I should make myself a bit more clear. An example would be if I am at a PC that has limited rights to the servers in the domain and I need some file or files from another server that they don’t have rights to. I have to log out and back in as an admin. I would like to have the ability to run or execute a server (\george) from a run command and it ask for credentials instead of it saying access denied or whatever the message may be. I will give the command in the above post a try and see how goes. As for right click and run as it does not always give my the option to do this. I am hoping there is a utility or command that I am not aware of that will work for this. Thanks for any help out there.
When you map a network folder in Windows Explorer, you can specify alternate credentials. As a matter of fact, when I try to input a restricted share, I am prompted to authenticate. Does this not work when you try?
BTW, for the most part, it’s just executables which provide a ‘runas’ feature on the menu.
Thanks for the post, however I do not use mapped drives. I am using \servernameshare format at the run command to get to the destination I am looking for
Okay, that should still work. When I try to access a remote share that the current user is not authorized to, I am prompted to authenticate with alternate credentials. Do you get such a prompt?
Oh, wait, sorry, you said at the ‘run command’. I’ve not tried that. Just to test, can you type the share address into the address bar in Windows Explorer and hit enter to see if it does what it does for me?
So, if you want to go to ‘\serversecretshare$’, then just type that into the address/location bar in Windows Explorer (without the quotes). Sorry I missed that the first time!
Crazy slash removal!
I meant
In case that gets lost…
2 slashes
server
1 slash
secretshare$
No luck on the secretshare$. I get windows is unable to find the path I am trying to access.
How do you normally access it when signed on as your administrative user? Is it mapped to that account as a share, or are you going to Start | Run to access it?
BTW, my reference with the $ at the end was just for reference (a share with a $ at the end is hidden from casual browsing). If your shared location was not set up with a $ at the end of the share name, then adding one would get you a ‘location not found’ error for sure.
Going to start run to access
You might try adding read permission for the user (pick one to test with) on the share itself, without adding any actual read permission to the files. To do that, you change the permissions on the share tab, and not on the security one.
This sounds to me like there’s just an odd permission missing somewhere in the share’s configuration. Any additional info about the permissions (explicit ‘denys’ instead of ‘not sets’, etc) might prove valuable.
Crazy slash removal!
As near as I can tell, back-slashes need to be “escaped” by typing two of them when you want one to appear (or four of them when you want two to appear. Let’s see:
Tom
@TomLiotta
Thanks for the assistance…I knew there had to be a way!