0

I am having trouble understanding what is going on with "runas".

Situation:

  • CLIENT is W10 Pro joined & logged in to Active Directory Domain FOODOM.
  • USER is member of FOODOM and default Domain-User, nothing elevated.
  • MYADMIN is member of FOODOM and member of Organization-Admin, Domain-Admin, etc. A typical Domain-Admin User.
  • UAC is enabled.
  • FOODOM\USER is logged in on CLIENT.

Problem:

FOODOM\MYADMIN is not allowed to runas with admin rights: from inside FOODOM\USER's session:

runas /user:FOODOM\MYADMIN cmd fails with "The requested operation requires elevation"

Hoewever, the built in administrator account works:

runas /user:FOODOM\Administrator cmd -> ok

FOODOM\MYADMIN can successfully login on CLIENT. When logged in, MYADMIN can run things with Domain Admin priveledges local and remote.

Thoughts: Am I missing some flag? None of the adminiatrive users we usually use can successfully invoke runas except built in administrator...? I suspect it only works because the local workstation is mixing up FOODOM\Administrator with .\Administrator?

Edit:

As the comments seem to ignore the real question, here as clarification: I am aware of elevation issues with UAC and are refering to DOMAIN Administrator, not the local one. What is the reason domain\Administrator actually CAN circumvent runas elevation while domain\someAdmin can NOT? LDAP Flag? Delegation? if(username==*\administrator) { do.secretElevationHack(); } ?

R. Bitrary
  • 1

1 Answers1

0

While you can run a command as elevated by right-click and choosing "Run As Administrator", this does not work for runas.

The reason is that runas was created before elevation was invented, so it has no switch for running an elevated command.

An alternative is to invoke the UAC dialogue by calling the VBScript ShellExecute function.

For example, to run a batch script (.vbs) with elevated permissions, use the flag runas:

Set objShell = CreateObject("Shell.Application")
objShell.ShellExecute "cmd.exe","/k echo test", "", "runas", 1
harrymc
  • 498,455