Allowing non-admins to run programs as admins

Posted on

QUESTION :

How can I enable non-admin users to run a certain application (in my case, a script) with admin permissions on Windows XP?

This would be similar to the setuid bit on *nix.

ANSWER :

There may be a better way to do this, but:

  1. Create an administrator account dedicated for this purpose
    -> Users can now right click and do “Run As”
  2. Apply group policy for that administrator account so they can only run the processes required

You may also want to add the administrator account to “Deny Login Locally” and “Deny Login Remotely”, so they can’t log in. However I do not know if this prevents them from using “Run As” command.

Leave a Reply

Your email address will not be published. Required fields are marked *