+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 24
Scripts Thread, arrrrggghh! vbs and quotes in Coding and Web Development; hi, i am trying to get truecrypt traveller to run for my teachers (non-admin). the problem is that it will ...
  1. #1
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61

    Question arrrrggghh! vbs and quotes

    hi,

    i am trying to get truecrypt traveller to run for my teachers (non-admin).

    the problem is that it will not load the driver for a non admin.

    my idea is autorun.inf calls a vbs that uses runas to elevate the application.

    however, i cannot seem to get this bit right

    Code:
    WshShell.Run "runas /user:adminequivalent "TrueCrypt\TrueCrypt.exe /q background /e /m rm /v Confidential.tc""
    where do my quotes/chr(34)s go?

    or does anyone have a better idea?

    TIA

    BoX

  2. #2
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    917
    Thank Post
    34
    Thanked 134 Times in 114 Posts
    Rep Power
    41
    WshShell.Run "runas /user:adminequivalent " & chr(34) & "TrueCrypt\TrueCrypt.exe /q background /e /m rm /v Confidential.tc" & chr(34) & ""

    I think...

  3. Thanks to DrPerceptron from:

    box_l (6th February 2009)

  4. #3

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    Out of interest why can't you just install truecrypt on these machines where they're not an admin?

  5. #4
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    @piqueaboo

    because the traveller mode uses (tries to) its own driver and does not use the one already installed. frustrating huh!


    @drperceptron

    thank you, but it looks like i need 2 more quotes.

    this works at the cmd prompt

    Code:
    Q:\>runas /user:adminequivalent "TrueCrypt.exe /q background /e /m rm /v Confidential.tc"
    BoX

  6. #5
    ajbritton's Avatar
    Join Date
    Jul 2005
    Location
    Wandsworth
    Posts
    1,632
    Thank Post
    23
    Thanked 75 Times in 45 Posts
    Rep Power
    34
    Surely for this to work you will have to give out the passwords for the adminequivalent local user accounts.

    Have you looked at this: Rohos Mini Drive

  7. #6
    Quackers's Avatar
    Join Date
    Jan 2006
    Posts
    1,310
    Thank Post
    40
    Thanked 141 Times in 116 Posts
    Rep Power
    53
    There is a security policy that allows non administrators to install drivers in group policy.

  8. #7
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    no. i shall use wshsendkeys and the encrypt the vbs file so it cannot be read

    i know that encrypted vbs (vbe) can be decrypted but it would only give them a local admin to the laptop/pc which will be fully encrypted and in accessible anyway.

    rohos is great and free but only gives 1Gb in the free vesion

    i have one with the head teacher already for testing. it gets horrible if the drive is not dismounted properly too. thats not to say truecrypt ones will not, they probably will. but teachers being who they are they, i dont expect them to get it right all the time and i dont want to have to deal with lots of buggered up drives with lost files.

    box

    @quackers

    thank-you

    i'll have a look tomorrow

  9. #8
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    dr perceptron, your code was correct.

    it special characters in my password in the wsh.sendkeys that was making it fail. it was just so hard to see what was happening in the cmd window after the password was entered.

    thanks applied to you origional post.

    BoX

  10. #9


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,769
    Thank Post
    222
    Thanked 2,630 Times in 1,938 Posts
    Rep Power
    779
    As mentioned above the best way to do this would be to install TrueCrypt along with the driver it needs so that even restricted users can mount encrypted volumes. If you would like a copy of the package I created that does this just let me know.

  11. #10
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    yes please!

    does it get the traveller mode for the usb stick working?

    BoX

  12. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

  13. #12
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    427
    Thank Post
    68
    Thanked 90 Times in 75 Posts
    Rep Power
    61
    Hi Geoff,

    I know they are only obfuscated really, but as i posted above

    i know that encrypted vbs (vbe) can be decrypted but it would only give them a local admin to the laptop/pc which will be fully encrypted and in accessible anyway.
    they might get a local admin passord but they will not get past the truecrypt boot password on the laptop.

    any better ideas than this?

    BoX

  14. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Why do you need to use Traveller mode? Why don't you just pre-install TrueCrypt on these machines and just avoid the whole issue?

    they might get a local admin passord but they will not get past the truecrypt boot password on the laptop.
    No but they could install a keylogger

  15. #14


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,769
    Thank Post
    222
    Thanked 2,630 Times in 1,938 Posts
    Rep Power
    779
    I'll upload the package later today.

  16. #15

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,644
    Thank Post
    895
    Thanked 1,314 Times in 798 Posts
    Blog Entries
    1
    Rep Power
    444
    One other way to do it for future reference is using AUTOIT. It has a function built in for runas another account and if you secure the exe it should be harder to sniff the details where as if I kid finds that script he has the account password.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 5
    Last Post: 13th August 2009, 12:56 PM
  2. [Joke] Real-life Dilbert manager quotes
    By somabc in forum Jokes/Interweb Things
    Replies: 2
    Last Post: 18th December 2008, 03:56 PM
  3. Unsolicited quotes from Internet Business Index
    By sparkeh in forum General Chat
    Replies: 7
    Last Post: 1st November 2008, 06:50 PM
  4. WinOS upgrade - quotes required : recommendations?
    By contink in forum Educational Software
    Replies: 5
    Last Post: 6th May 2008, 10:58 PM
  5. VBS Tutorial
    By Nij.UK in forum Coding
    Replies: 15
    Last Post: 25th November 2006, 12:01 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •