[THIN] Re: Any command line utility that can do the following?

  • From: "Alexander Danilychev" <teknica@xxxxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Tue, 17 Dec 2002 15:23:42 -0800

Hi all,

Interesting code...
There is one shortcoming though. Looking at the source code I can tell that 
account from which this program is executed requires login as a part of OS 
rights, otherwise API's involved should not work. That is probably the 
reason that it did not work for some of you.

There is another approach, which does not have this limitation - 
impersonation on the executable level rather than thread level. Limited only 
to Win2K or XP  while previous program will work on NT4.0.

A sample app is available at http://www.tekworkshop.com/tools
Application is called "AppAccess" (new release will be called 
?Impersonator?). You can use it to open iExplorer as another user and take 
care of things like change permissions, execute a program etc. or open 
multiple EXE at the same time as another user, all without logout from your 
own session.

There are some cases when this program will not work either. Usually 
additional rights will be required (note that you do not need to be an admin 
to use this program).

Additional rights are:
A. Act as part of the operating system.
B. Increase quotas.
C. Replace process level token.
D. Log on as a batch job.

Again, in most cases you can use this program as it is.

ALEX







>From: "Walsh, Tim" <Tim_Walsh@xxxxxxx>
>Reply-To: thin@xxxxxxxxxxxxx
>To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
>Subject: [THIN] Re: Any command line utility that can do the following?
>Date: Tue, 17 Dec 2002 12:33:33 -0500
>
>
>Ed,
>
>Try this link
>
>http://wwwthep.physik.uni-mainz.de/~frink/nt.html
>
>There is a file called CHOWN which does what you need.
>
>This is the only one that I could get to work for me.  I was able to take
>ownership of files that I had absolutely no access to.  Kind of scary, but
>effective.  I needed to move 20GB of TS profiles and homedirs that I had
>problems accessing since NT did not assign admins to the ACLs of those dirs
>
>Hope this helps..
>
>tw
>
>-----Original Message-----
>From: Ziots, Edward [mailto:EZiots@xxxxxxxxxxxx]
>Sent: Tuesday, December 17, 2002 10:25 AM
>To: 'thin@xxxxxxxxxxxxx'
>Subject: [THIN] Any command line utility that can do the following?
>
>
>
>To the list,
>
>Somehow I got a problem in which I have tried to take ownership of a folder
>for which I have full control and still get an access denied. Is there a
>utility in which I can reset the ownership on this folder to 
>Administrators?
>Without having to use the GUI which has proved to not work in this case?
>
>Ed
>***********************************************
>This Weeks Sponsor: 99point9.com
>The 99Point9.com Online Tech Support
>Helpdesk is the one-stop solution for all
>your server-based computing needs.
>http://www.99point9.com
>************************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm
>
>***********************************************
>This Weeks Sponsor: 99point9.com
>The 99Point9.com Online Tech Support
>Helpdesk is the one-stop solution for all
>your server-based computing needs.
>http://www.99point9.com
>************************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm


_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*  
http://join.msn.com/?page=features/junkmail

*********************************************** 
This Weeks Sponsor: 99point9.com
The 99Point9.com Online Tech Support 
Helpdesk is the one-stop solution for all 
your server-based computing needs. 
http://www.99point9.com
************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: