Using Run as ...

I have XP Pro SP2 which is fully updated. I use a limited account for general use and have disabled fast switching.

If I want to make any configuration changes or examine anything which requires Admin rights, I either shift-right click or open a CMD screen (using "runas /user:<Admin name> cmd") and then run the appropriate .exe, .cpl etc.

I've noticed that I can access Control Panel applets in this way except Network Connections (to gain access to TCP/IP properties etc.). Is there any way to access this from a limited user account? If not, what's special about this? I can access Administrative Tools, Security Centre, Windows Firewall, User Accounts etc. in this way but it's infuriating that I can't access Network Connections. The Security settings for ncpa.cpl are such that my limited account can Read & Execute.

I know that I can get at what I want using the command line (netsh interface ...) but it's not quite as easy as using the GUI.

Thanks for your time.

Quote:

---

Originally Posted by Ignatius

I have XP Pro SP2 which is fully updated. I use a limited account for general use and have disabled fast switching.

If I want to make any configuration changes or examine anything which requires Admin rights, I either shift-right click or open a CMD screen (using "runas /user:<Admin name> cmd") and then run the appropriate .exe, .cpl etc.

I've noticed that I can access Control Panel applets in this way except Network Connections (to gain access to TCP/IP properties etc.). Is there any way to access this from a limited user account?

---

runas /user:<admin name> "c:\Program Files\Internet Explorer\iexplore.exe"
Then type "Control Panel" in the addressbar ;)

Thanks for the tip SirDice, but it doesn't work!

When I typed "Control Panel" in the address bar (with or without the quotes), it defaulted to searching the 'net for Control Panel. I entered c:\ and it worked like Windows Explorer but it wouldn't allow me access to the Administrator's files (even though I'd used the correct <admin name> and password in the runas command). It seems that the Admin privileges aren't transferred to iexplore.exe (I'd seen something about this before). Needless to say, when I navigated to Control Panel and Network Connection Properties, it reported:

"Some of the controls on this property sheet are disabled because you do not have sufficient privileges to access or change them"

Any other ideas?

Have you tried right clicking on the icon and just choose the "Run As" option select admin type in the password and open it that way?

Quote:

---

Originally Posted by t34b4g5

Have you tried right clicking on the icon and just choose the "Run As" option select admin type in the password and open it that way?

---

That option isn't available - either from right click or shift-right click. It seems to affect ONLY Network Connections and the result is the same if I navigate to ncpa.cpl

Have you tried

runas /user:<admin name> "%SYSTEMROOT%\ncpa.cpl

Quote:

---

Originally Posted by dinowuff

Have you tried

runas /user:<admin name> "%SYSTEMROOT%\ncpa.cpl

---

I tried it (with and without the double quotes) and the CMD screen opens, awaiting my Admin password but then it closes. ncpa.cpl is in c:\windows\system32 so I tried changing %systemroot% but still no joy.

I'm coming round to the idea that this behaviour might be by design, although I have no reason why it should only affect this applet.

Quote:

---

Originally Posted by Ignatius

I tried it (with and without the double quotes) and the CMD screen opens, awaiting my Admin password but then it closes. ncpa.cpl is in c:\windows\system32 so I tried changing %systemroot% but still no joy.

I'm coming round to the idea that this behaviour might be by design, although I have no reason why it should only affect this applet.

---

OK I may be reading this wrong, but you have to open the command prompt and then type in the command. That is to say you can't do this from the windows run command.

Hi

Unfortunately, ncpa.cpl is the only control panel item that cannot
be started with runas, neither with

Code:

---

runas /user:administrator ncpa.cpl

---

nor with

Code:

---

runas /user:administrator test.bat

---

where test.bat includes

Code:

---

rundll32.exe shell32.dll,Control_RunDLL ncpa.cpl

---

The following, however, will work[1,2]:

Code:

---

runas /user:administrator "explorer.exe ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}"

---

Cheers :)


[1] http://msdn2.microsoft.com/en-us/lib...17(VS.85).aspx
[2] http://msdn2.microsoft.com/en-us/lib...18(VS.85).aspx

*bows to secware*Cheers mate - another thing learned today!

Thank you sec_ware but that doesn't work either, whether I try it from Start>Run or a CMD screen.

Hi

You may have to make sure that Launch folder windows in a separate process is checked.

Optionally, you may check one of the following two commands:

Code:

---

runas /user:administrator "explorer.exe /e,::{7007ACC7-3202-11D1-AAD2-00805FC1270E}"
runas /user:administrator "explorer.exe /e,/root,::{7007ACC7-3202-11D1-AAD2-00805FC1270E}"

---

This works on different versions of XP, XP SP1 and XP SP2.
Otherwise, there may be something custom on your box
(any particular group policies etc...)?

Cheers

Hi sec_ware

No joy, I'm afraid. I made sure that Launch folder windows in a separate process is checked. None of the commands works for me, either from Start>Run or a CMD screen. I'm not connected to a domain (and never have been).

I might have to concede that I'm not going to be able to do this!

As a matter of interest, I came across something similar(http://www.autoitscript.com/forum/in...de=linearplus). The final contributor mentioned that the explicit path has to be given using CLSIDs. I've not been able to get this to work either.

Hi

I start to take this personally :D

Since the junction point in discussion is a subfolder of the desktop,
I don't think that the full path solves the problem. Anyway, try
using explorer.exe rather than iexplorer.exe, with/without /n,/e,/root
(I am guessing...)

Code:

---

runas /user:administrator "c:\windows\explorer.exe /n,/e,/root,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{21EC2020-3AEA-1069-A2DD-08002B30309D}\::{7007ACC7-3202-11D1-AAD2-00805FC1270E}"

---

Note:[1]
{20D04FE0-3AEA-1069-A2D8-08002B30309D} = My Computer
{21EC2020-3AEA-1069-A2DD-08002B30309D} = Control Panel


If this does not work, try a vbs-script (runas /user:administrator "wscript.exe c:\test.vbs"), like

Code:

---

Set oShell = WScript.CreateObject("WScript.Shell")
oShell.Run "c:\windows\explorer.exe /n,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{21EC2020-3AEA-1069-A2DD-08002B30309D}\::{7007ACC7-3202-11D1-AAD2-00805FC1270E}"

---

If one of them works, we will try understand why ... :)

Cheers

/edit: if none of them worked, try to start explorer.exe as administrator
(runas /user:administrator c:\windows\explorer.exe), then fill the
address bar with ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{21EC2020-3AEA-1069-A2DD-08002B30309D}\::{7007ACC7-3202-11D1-AAD2-00805FC1270E}


[1] http://www.autohotkey.com/docs/misc/CLSID-List.htm

Thanks sec_ware for your patience with this!

Some progress, at last. When I killed explorer and restarted it as administrator, your previous suggestions for opening Network Connections (and their properties) worked as they should. Needless to say, the desktop changed to that of the administrator and all open applications disappeared until I killed explorer and restarted it as the user with limited rights. It's a bit fiddly, but a lot quicker that formally logging out and logging back in with admin rights.

I recall reading something a while ago about the way that explorer runs and that may be relevant. I was less experienced (and willing to experiment!) then so I can't recall details - it went way over my head. I just wonder exactly WHY this behaviour is exhibited only with Network Connections. I guess that we, mere mortals, will never know the thought processes of the MS planners!