Elevate user rights versus RunAs

Is there any way that I can temporarily elevate a user's rights/memberships?
I have an app that requires each user to have admin rights to properly
execute when run for the first time.

RunAs won't work because the app sees the admin account rather than the user
account.

I'm hoping there is a simpler process than me having to add users to the
local admin group, as that requires multiple logoff/logons to be performed.
Multiplied by 30+ users can make for a very unproductive day.

I'd love to have an ElevateTo command, allowing me to grant admin rights to
a user for a specific period of time (Ex. 1hr or until logoff).

Any ideas?

Thanks,
Wes

Wes wrote:

> Is there any way that I can temporarily elevate a user's
> rights/memberships? I have an app that requires each user to have admin
> rights to properly execute when run for the first time.
>
> RunAs won't work because the app sees the admin account rather than the
> user account.
>
> I'm hoping there is a simpler process than me having to add users to the
> local admin group, as that requires multiple logoff/logons to be
> performed. Multiplied by 30+ users can make for a very unproductive day.
>
> I'd love to have an ElevateTo command, allowing me to grant admin rights
> to a user for a specific period of time (Ex. 1hr or until logoff).

You are describing the ever-useful sudo in *nix operating systems. Windows
doesn't have the equivalent, although there are a few third-party apps such
as WinSudo (which I haven't tried).

However, Microsoft's Aaron Margosis's MakeMeAdmin might work for you:

http://blogs.msdn.com/aaron_margosis...24/193721.aspx

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

You can tell RunAs not to load a different profile, which might help.

But for a utility to to elevate a user, here's one I made earlier:

http://mylogon.net/su

--------------------------
"This is a wonderful computer. It''s 20yrs old and absolutely reliable.
And, in all that time it''s only had four mobos, six processors, two cases,
seven OS''s ...."


"Wes" wrote:

> Is there any way that I can temporarily elevate a user's rights/memberships?
> I have an app that requires each user to have admin rights to properly
> execute when run for the first time.
>
> RunAs won't work because the app sees the admin account rather than the user
> account.
>
> I'm hoping there is a simpler process than me having to add users to the
> local admin group, as that requires multiple logoff/logons to be performed.
> Multiplied by 30+ users can make for a very unproductive day.
>
> I'd love to have an ElevateTo command, allowing me to grant admin rights to
> a user for a specific period of time (Ex. 1hr or until logoff).
>
> Any ideas?
>
> Thanks,
> Wes