i have batch files created administrator , need non-administrative users run them. have given permission non-administrative user read , execute file , entire folder tree. still not able run batch file, getting "access denied" error.
are there more permissions need set? ( these batch files start / stop windows services).
you use runas
stated here: https://superuser.com/questions/973349/is-there-a-windows-equivalent-of-the-setuid
but require users know administator password.
another "hack": create running service in given folder (say c:\trigger
) every 10 minutes, , if finds file in here, starts/stop service , deletes file.
users use script create file, start service after while.
since service starts/stop given service, there no security issue.
Comments
Post a Comment