RUNAS – Windows CMD Command
Notice: A non well formed numeric value encountered in /home/future4tech/public_html/wp-content/plugins/crayon-syntax-highlighter/crayon_formatter.class.php on line 118
Notice: A non well formed numeric value encountered in /home/future4tech/public_html/wp-content/plugins/crayon-syntax-highlighter/crayon_formatter.class.php on line 119
Execute a program under a different user account (non-elevated).
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 |
Syntax RUNAS [ [/noprofile | /profile] [/env] [/savecred | /netonly] ] /user:UserName program RUNAS [ [/noprofile | /profile] [/env] [/savecred] ] /smartcard [/user:UserName] program Display the trust levels that can be used: RUNAS /showtrustlevels Run a program at a given TrustLevel: RUNAS /trustlevel:TrustLevel program Key /noprofile Do not load the user's profile. This causes the application to load more quickly, but can cause some applications to malfunction. /profile Load the user's profile. (default) /env Use the current environment instead of user's. /netonly Use the credentials for remote access only. /savecred Use credentials previously saved by the user. This option is not available on Windows 7 Home or Starter Editions and will be ignored. /smartcard Load the credentials from a smartcard. /user UserName in the form USER@DOMAIN or DOMAIN\USER /trustlevel Level One of levels enumerated in /showtrustlevels. RunAs is not able to launch an application with an elevated access token. program The program to run. |
Enter the password when prompted.
/profile is not compatible with /netonly.
/savecred is not compatible with /smartcard.
When you start a program with RunAs /netonly, the program will execute on your local computer as the user you are currently logged on as, but any connections to other computers on the network will be made using the user account specified.
Without /netonly everything will run under the user account specified.
The RUNAS command unlike most other CMD and DOS commands requires that it’s command line is quoted, it uses the regular C runtime library command line parser. This also means that RUNAS requires the backslash \ as an escape character, not the standard ^ escape used by other CMD commands.
RunAs Reqires the “Secondary Logon” service to be running.
The error level %ERRORLEVEL% returned by RunAs: success = 0, failure = 1
Run with Elevated permissions
In Windows Vista and above, you can run a script with elevated permissions by right clicking and choosing “Run As Administrator”
The RunAs command predates elevation, so it has no switch for running an elevated command.
An alternative is to invoke the UAC dialogue by calling the VBScript .ShellExecute function.
If you are already running elevated, for example an elevated CMD shell, then RUNAS will launch an application as elevated, but this is equally true just running them without RUNAS, it makes no difference.
When a script is run with elevated permissions several aspects of the user environment will change: The current directory, the current TEMP folder and any mapped drives will be disconnected.
RunAs from Windows Explorer
Select an executable file, Shift-Right-click and select Run As..
This option can be hidden by setting
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HideRunAsVerb=1
Thanks for another magnificent post. Where else may just anyone get that type of info in such an ideal method of writing? I’ve a presentation next week, and I’m at the look for such info.