Author: kyanha
Subject: RunAsToken
Posted: 11 May 2014 at 2:39am
I would like to request a new utility, named something like RunAsLimited. The idea is to cause it to alter the token assigned to the new process with CreateLimitedToken(), essentially exposing the code from "run as limited user" from Process Monitor as a command-line utility. (Why this functionality isn't part of "runas" is beyond me.)
I am on Windows 7, and would like to be able to run system maintenance scripts that start processes that don't need to be able to do all of the things that elevated processes can do. In particular, I often have elevated command prompts that I want to start non-elevated programs and utilities from. (A particular software I use sometimes requires certain maintenance that needs to be done from an elevated prompt, which I'd like to find a way to automate. I already start it from the command prompt, so making a batch file for it seems like a no-brainer; I really have been trying to get into PowerShell -- ever since it came out, even -- but I seem to be missing what it takes to do so.)
I've also been trying to use the Windows SDK for this. You'd think it should be easy, right?
Subject: RunAsToken
Posted: 11 May 2014 at 2:39am
I would like to request a new utility, named something like RunAsLimited. The idea is to cause it to alter the token assigned to the new process with CreateLimitedToken(), essentially exposing the code from "run as limited user" from Process Monitor as a command-line utility. (Why this functionality isn't part of "runas" is beyond me.)
I am on Windows 7, and would like to be able to run system maintenance scripts that start processes that don't need to be able to do all of the things that elevated processes can do. In particular, I often have elevated command prompts that I want to start non-elevated programs and utilities from. (A particular software I use sometimes requires certain maintenance that needs to be done from an elevated prompt, which I'd like to find a way to automate. I already start it from the command prompt, so making a batch file for it seems like a no-brainer; I really have been trying to get into PowerShell -- ever since it came out, even -- but I seem to be missing what it takes to do so.)
I've also been trying to use the Windows SDK for this. You'd think it should be easy, right?
