old program needs to run as admin that to uac workarounds?

[chazzy2501]

I have a music program that the music teacher wants to use. (he just spent £150 on it) The program crashes unless you run as admin.. How do I get this software to work for a standard user? I granted him full perms to the folder no reg keys to talk of but it must need something else?

 

I think I heard of a scheduled task / shortcut workaround once?

 

I've run it for him and told him never to close the program for now

 

uac is damn good but old cruddy badly made software crops up now and again..

[themightymrp]

Try deploying this registry edit via GPP

 

Point it to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

 

Set the value name to the path of the programs executable and then set the value itself to RUNASADMIN

 

Put this registry edit in the Computer Configuration side

 

[chazzy2501]

would this be the same as "run as admin" in the compatibility settings? if so this wont work as it prompts the standard user for an admin login:(

[themightymrp]

Hmmm, yeah I think it is the same as the right-click Run and Admin Could you try running Process Monitor (procmon.exe) and see what it fails on when you run it as him? It might point you to an .INI file or something in the Windows folder that requires more permissions?

 

So as it currently stands, is the machine logged in as him, then you have run the program and entered your Admin credentials to get it to open?

 

If so, how about creating a local Admin (power user maybe??) account on the machine and giving him the username and password for it? He could then enter that himself to run the software?

[mac_shinobi]

If the exe in the directory of where ever said application is installed ( presumably c:\program files ) then right click on exe --> properties -->

 

click the unblock button on the general tab ( if it exists ) --> Go to the compatability tab --> change settings for all users button --> tick the check box to run as administrator ) --> apply --> ok

 

If for the shortcut that you created for said program which is on the desktop then go to the properties of said shortcut --> Click the advanced button --> run as administrator --> ok --> go to the compatability tab --> change settings for all users --> run as administrator --> apply & ok etc

 

Screen grabs attached - although my AD account has been added as a local admin account on the computer I use , not sure if that helps or makes any difference

Edited June 18, 2013 by mac_shinobi

[chazzy2501]

hum, with local admin my standard users may install programs, etc..

[mac_shinobi]

Runas Password

[mac_shinobi]

Bit of googling and found the above link from here :

Force software to always run as admin without exposing admin password

[pete]

There's also the Microsoft Compatibility Toolkit, which lets you build and deploy shims as .msi (I'm working from memory, think it's .msi). We had to deploy a few when we migrated to Windows 7.

 

Download Microsoft Application Compatibility Toolkit 5.6 from Official Microsoft Download Center

Edited June 18, 2013 by pete
typo

[ADMaster]

I use CPAU from joeware for this. Encode the program parameters username and password into a job file, then create a bat file to decode the job file. Change the icon of the bat file to that of the program and the user doesn’t notice too much.

I’ve done this for a few old programs, I can post a copy of my bat files if you like.

 

 

CPAU

[steewy]

I would personally use AUTOIT. By scripting the shortcut you can make sure than the application will always run as admin.

Have a look at AUTOIT, It's pretty simple to use and save my life a few times.

 

AutoIt - AutoItScript

Run as administrator ? - General Help and Support - AutoIt Forums

[jugglerjoe]

heya Chazzey2501,

on the persons PC have you actually tried to disable UAC and run the software of turn down UAc 1 notch at a time to see if he can run it like that?

I would recomend trying that sounds like the group policy admin approval rule for UAC or so. not an expert on how that works tho, just an idea ^_^

[RageSto]

We were running a piece of software that needed admin rights to run. What I ended up doing was throwing together a VBScript that used the runas command, and then repacked it into an exe and changed the program shortcut to launch the script instead.

 

Here's the script:

Set WshShell=WScript.CreateObject("WScript.Shell")
strCmd="[u][b]Path to Program.exe[/b][/u]"
strUser="[u][b]Domain\AdminUser[/b][/u]"
strPass="[u][b]AdminPassword[/b][/u]"
set WshShell=CreateObject("WScript.Shell")
WshShell.Run "runas.exe" & " /u:" & strUser & " " & strCmd
WScript.Sleep 1000
WshShell.Sendkeys strPass & "~"

 

Just change the underlined items to match what you need and then use IExpress to wrap it in an exe. All the user will see is a command prompt pop up when runas runs.

 

One important caveat, however:

This script doesn't refocus the Command Prompt window before inserting the password. So if a user clicks into a box that accepts text before the password is sent to the command prompt, they're going to get the cleartext password. I never messed around with fixing that part of it, because we made them local admins for different reasons. However, I thought I'd post the script anyways as a starting point.

Edited June 25, 2013 by RageSto

[ass17]

Some software need more than run as administrator. We ave used palmersoft runasuser which encrypts the domain credentials into a repackaged EXE. Works a treat.

 

Vbscript a is a no no with things like this, as user can read the vbscript code and see the credentials in all its glory...

[MordyT]

We used a piece of software called beyond trust that might help. I never played with it, but does functions like this.