How to combine "runas" function and "run as administrator" function in cmd

i found issue in windows 2008 r2 environment. here steps:

1. have 2 users: "user1" , "user2", , add these users adminsitrators group.

2. login with "user1", , right click cmd, select "run administrator", execute command "vssadmin list writers". , writers listed successfully.

3. if missed "run adminsitrator" step in #2, error:"error: don't have correct permissions run command.  please run utility command window has elevated administrator privileges."

4. if login "user2", , right click cmd, select "run administrator", execute command "runas /user:user1 cmd.exe", , execute command "vssadmin list writers". , same error #3. 

now want use #4 same results #2, cannot find method add "run administrator" "runas" function in #3.

anyone can me?

look forward getting superman resolve issue.

/harry

 

hi harry,

this behavior caused user account control. far know, "runas" not combined "run administrator”.

user account control (uac) security component enables users perform common tasks non-administrators (called standard users in windows vista), , administrators without having switch users, log off, or use run as. user accounts members of local administrators group run applications standard user. separating user , administrator functions, uac helps users move toward using standard user rights default.

when administrator logs on computer running os after windows vista, user assigned 2 separate access tokens. access tokens, contain user's group membership , authorization , access control data, used windows operating system control resources , tasks user can access. access control model in earlier windows operating systems did not include failsafe checks ensure users wanted perform task required administrative access token. result, malicious software install on users' computers without notifying users. (this referred "silent" installation.)

meanwhile, default, built-in administrator account runs full administrator access token.

for more information, please refer to:

understanding , configuring user account control in windows vista

http://technet.microsoft.com/en-us/library/cc709628(ws.10).aspx

lesson 2: understanding user account control (uac)

http://technet.microsoft.com/en-us/library/cc505883.aspx

hope helps.

regards,

bruce

Windows Server  >  Security