Does anyone know what the SUSS command does in NT?

[sigmab]

I've ran across a command SUSS in NT but I don't know exactly what it is and what it does. I executed the command in the CMD and ran it from NT and it appears to do something but I don't know what. Any suggestions???

 

[dsi]

I do not have it on my NT4 machine. Have you tried to open it in notepad? That may provide some insight.

 

[sigmab]

I think the command is part of the NT reskit. Not positive though. Did you try running it from the start menu ---run SUSS (not trying to insult your inteligence or anything just want to know that we're on the same page).

 

[AussieClint]

I a pretty sure it is something to do with the Super User service and the SU.Exe that is also in the resource kit. Super User Service Service? One of the switches that is used is suss -install but what it does I don't know.

HTH

 

[DanielMc]

Su.exe is a utility from the Resource kit in NT4 that lets you run a single program in a different security context than the logged on user. It is like the su command in unix. Suss -install will install the service. I am not sure but I think SU stands for Switch User. That is exactly what it does anyway.

For example,
Your user has the wrong system time. Also, the user has MS word, MS Excel, An Email program and some other applications open and claims he or she can not log off right now. If you are running this service, you could just go to a command promp and type:

su administrator
<Type password here when prompted>
time 12:00 (or whatever time it is)

then close the command window. Any command or application you launched from that window runs as local administrator so completes successfully even though the user logged on did not have authority to do so.

In Windows 2000 this is built in. If you hold down shift and right click on a program (Shortcut?), you will have an option for RunAs, which gives a nice GUI to switch users in.


DanielMc

 

[sigmab]

Thanks DanielMc for the heads up on the SUSS command. I tried it out and it works great. I'm using it with remote access (RCMD) to make changes to users who do not have admin rights. This is a powerfull tool. Thanks again.

 

[kevinnaomi]

Just a quick question.
Is the SU.exe only used for editing users accounts?
Can it be used to run BAT files on remote NT4 workstations?
If so, what would the command line look like?

 

[DanielMc]

SU.exe allows yo to run under a different security context. But it runs on the local machine and it also requires access to a text file with the account password to be viewable by the user.

A tool you might like comes from SysInternals.com called PSTools (PSExec.exe) . PSTools is a collection of small applications that are kind of like ResKit applications. PSExec allows you to execute programs remotely without any client software using the RPC protocol. It's Free anyway...

Daniel

 

[kevinnaomi]

Thanks. I have tried to use PSEXEC. Unfortunately not much luck.
Thanks for the help.

 

[DanielMc]

Not to beat a dead horse about PSExec, but it has worked well for me once I realized a few of it's problems. I do not use it's built-in switches for changeing user. I Map the C$ drive of the remote computer first using the net use command. Once the session is established, PSExec works well. The new PSExec has a -i switch which will run the program interactive with the user. Some programs require this. Also, you have to make sure the program executable is there already, I have not had good luck with the built-in copy switch either.

Batch File:
net use w: \\serverIP\c$ /user:domainname\username password
copy program.exe w:\program.exe
psexec \\serverIP c:\program.exe
net use w: /D /Y

anyway, hopefully these tricks help you with PSExec, if not there are other tools I am sure. I have used the schedule service/At commands a little, but not much luck.

Daniel