Sign in to follow this  
Followers 0
Hurmoth

Command-line runas with password

15 posts in this topic

I know it isn't secure, but it is the best thing I have right now, so, here it goes...

I need to be able to run a file as an admin in a batch file (i.e. runas /u:Administrator "%blahblah%.exe").

The runas command built into Windows doesn't support this, but I know I've seen apps that do support this. Anyone know of any that are free?

Remember, the entire thing is command line. Thanks for the help :D

Share this post


Link to post
Share on other sites
I know it isn't secure, but it is the best thing I have right now, so, here it goes...

I need to be able to run a file as an admin in a batch file (i.e. runas /u:Administrator "%blahblah%.exe").

The runas command built into Windows doesn't support this, but I know I've seen apps that do support this. Anyone know of any that are free?

Remember, the entire thing is command line. Thanks for the help :D

Hmm I dont have any free utilities. We use the program run as professional here and it does command line and batch file.

Share this post


Link to post
Share on other sites

Well, it doesn't really have to be free, but $400+ isn't really an option for me.

Share this post


Link to post
Share on other sites

Is this what your looking for -- it allows password on the command line

http://www.softtreetech.com/24x7/archive/53.htm

Not sure if its free or not - but you can download from this page, and it seems to run just fine, etc.

edit: Here is some info you might be interested in as well

http://www.commandline.co.uk/sanur/

Free Runas Alternatives

* CPAU Runas alternative supporting encoded passwords.

* LSrunas/LSRunase Console based Runas alternatives, the latter supports encoded passwords.

* AutoIt (v3) Scripting language for automating the Windows GUI.

* SuperExec GUI that encrypts passwords using Windows cryptography API's

BTW the AutoIT would get my vote --- its a tool any admin should have access to.

Share this post


Link to post
Share on other sites

Thanks BudMan, that's exactly what I'm looking for (Y)

Share this post


Link to post
Share on other sites

RunasSPC is not a powertoy.. here is the link to that tool

http://www.robotronic.de/runasspc/

Share this post


Link to post
Share on other sites

runas /savecred will do it if you only need to save one password.

XgD

Share this post


Link to post
Share on other sites

^ the problem is that is with /savecred they can run "anything" they want with those credentials.

Share this post


Link to post
Share on other sites
RunasSPC is not a powertoy.. here is the link to that tool

http://www.robotronic.de/runasspc/

How the heck did my copy/paste not work? :unsure: Thanks for noticing. (Y)

It's a great tool for scripted deploys.

Share this post


Link to post
Share on other sites
^ the problem is that is with /savecred they can run "anything" they want with those credentials.

But if the other option is to have the password in plaintext in the batch file, this isn't really an issue?

XgD

Share this post


Link to post
Share on other sites
But if the other option is to have the password in plaintext in the batch file, this isn't really an issue?

XgD

Or use the solution where it isn't. Like mine.

Share this post


Link to post
Share on other sites

I have positive experience with lsrunas. Bad side: you have exposed password in batch file. Good side: Users doesn't know what is batch file and how to edit it. Also, what they can do with admin pass :D

Share this post


Link to post
Share on other sites
But if the other option is to have the password in plaintext in the batch file
But there were many options give than allow you to encode/encrypt the password so that its not plain text, or you could turn the batch into an exe so they can not clearly read the password, etc.

There are other ways to obscure the password in a batch file, /savecred is cut and dry the user can run anything they want without even knowing anything just click use saved credentials.

Off the top a simple method would be to just turn your batch file with the commands in it to a exe. XP comes with the tool IExpress that can do this.

Or you use one of the many free batch to exe converters out there, etc.. etc.

Share this post


Link to post
Share on other sites

+Budman's right. AutoIt makes this easy (for XP anyway):

; Are we already admin?
If Not IsAdmin() Then
	RunAsSet($CmdLine[1],'' , $CmdLine[2])
	Run( $CmdLine[3]  )
	Exit
EndIf

Save this script as BatchRunAs.au3 (or whatever) and compile it to an executable with Aut2Exe. Then in the batch file just add the line

BatchRunAs.exe <Username> <Password> Command

If required the username, password and the program to be run can all be hard coded (change the CmdLine[] parameters in the above script), before converting to an exe.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.