Running Script with Elevated Rights

I have a VB script which detects the OS version, installs the latest RPC
patch, and opens an IE window telling the user they have been updated and
need to re-boot the system to "activate" the patch. I am pushing this task
with SMS and all is fine.

The problem is I have a significant number of users who are not SMS clients
and do not have Admin Rights on the local machine. I am trying to get the
script to run with elevated rights when manually invoked by the user and
having no success (I want to email a link to the script which says "Click
here to update your system").

Anyone have any words of wisdom on this task? I appreciate any and all
comments (unless they are nasty).

Thanks,

Russ J

Torgeir
Mon Sep 15 10:34:39 CDT 2003

RussJ wrote:

> I have a VB script which detects the OS version, installs the latest RPC
> patch, and opens an IE window telling the user they have been updated and
> need to re-boot the system to "activate" the patch. I am pushing this task
> with SMS and all is fine.
>
> The problem is I have a significant number of users who are not SMS clients
> and do not have Admin Rights on the local machine. I am trying to get the
> script to run with elevated rights when manually invoked by the user and
> having no success (I want to email a link to the script which says "Click
> here to update your system").
>
> Anyone have any words of wisdom on this task? I appreciate any and all
> comments (unless they are nasty).

Hi

Some 3rd party RunAs solutions that "hides" (encrypt) username/password
are listed in the link below (buy solutions). Can be run from network shares,
so nothing needs to be installed on the client computers.

http://groups.google.com/groups?selm=3E272913.27CBE26D%40hydro.com


And from a recent post by Peter M.:

<quote>
I am currently using AutoIt V3 (http://www.hiddensoft.com/autoit3/)
It includes a command to run a command as a special user. You can
write a simple script and then compile it with autoit as an executable.
Protect this executable with a password and you are done.

AutoIt V3 ist still beta and under development, but the actual version
is stable and the functions you need (runasadmin,regwrite...) are
already implemented and working.
</quote>



--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter

Michael
Tue Sep 16 10:42:39 CDT 2003


> The problem is I have a significant number of users who are not SMS
clients
> and do not have Admin Rights on the local machine. I am trying to get the
> script to run with elevated rights when manually invoked by the user and
> having no success (I want to email a link to the script which says "Click
> here to update your system").

'Dim oFileSystem, WshShell
'Set WshShell = WScript.CreateObject("WScript.Shell")
'Set oFileSystem = CreateObject("Scripting.FileSystemObject")

'If oFileSystem.FileExists("C:\Program Files\...............") Then

'WshShell.Run "runas.exe /env /user:YOURDOMAIN\YOURUSERNAME PATHTO.exe"
'WScript.Sleep 500
'WshShell.Sendkeys "ABOVE ACCOUNT PASSWORD"
'WshShell.Sendkeys "~"

Here is what I use, I simply do a runas with a domain account with admin
privileges. If you set the sleep time to less, it will flash by so fast as
to be unreadable. I also check for a file to see if it exists, if it does,
the rest fires.

Hope it helps.


"RussJ" <russ.johnson@tellabs.com> wrote in message
news:uSj9b.12$5f6.12855@news.uswest.net...
> I have a VB script which detects the OS version, installs the latest RPC
> patch, and opens an IE window telling the user they have been updated and
> need to re-boot the system to "activate" the patch. I am pushing this
task
> with SMS and all is fine.
>
> The problem is I have a significant number of users who are not SMS
clients
> and do not have Admin Rights on the local machine. I am trying to get the
> script to run with elevated rights when manually invoked by the user and
> having no success (I want to email a link to the script which says "Click
> here to update your system").
>
> Anyone have any words of wisdom on this task? I appreciate any and all
> comments (unless they are nasty).
>
> Thanks,
>
> Russ J
>
>