Somehow users on my computer running xp pro have lost the "runas" option when you right-click on a shortcut or anything else. This used to function but no longer does. I have checked Secondary Login service and it is running. I have two users and they are members of the power users group. If I log in to the administrator account, runas is there which makes me think that it must be a permission setting somewhere. I am really lost on this one.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Runas is not available to users 3
- Thread starter dubruoy
- Start date
-
1
- #2
Sigh. This can be a very tricky thing to make work consistently.
My advice is to remove the existig task(s) and redo them with two additional options:
1. Specify the /savecred option
If one uses the /savecred switch: the first time the password is cached for later use, and thereafter as long as the cached password is correct for the runas account the prompt for the password is bypassed and other credential issues that could stop the task from running are resolved as well. (Assuming you are passing username/passwords that are valid).
2. Do not assume any system state.
For example, if the runas program assumes that a mapped drive will be available, it likely is in error. As part of the job explicitly map shared resources prior to the actual program call.
You are not doing a logon as the runas user, you are just borrowing the credentials. Mapped resources cannot be assumed as available when the runas task is run.
3. Specify the /Profile swith in the runas command. My own experience is that unless asserted, the default can become the equivalent of /NoProfile
My advice is to remove the existig task(s) and redo them with two additional options:
1. Specify the /savecred option
If one uses the /savecred switch: the first time the password is cached for later use, and thereafter as long as the cached password is correct for the runas account the prompt for the password is bypassed and other credential issues that could stop the task from running are resolved as well. (Assuming you are passing username/passwords that are valid).
2. Do not assume any system state.
For example, if the runas program assumes that a mapped drive will be available, it likely is in error. As part of the job explicitly map shared resources prior to the actual program call.
You are not doing a logon as the runas user, you are just borrowing the credentials. Mapped resources cannot be assumed as available when the runas task is run.
3. Specify the /Profile swith in the runas command. My own experience is that unless asserted, the default can become the equivalent of /NoProfile
- Thread starter
- #3
bcastner, thanks for your reply but I am a little lost. Are you saying that if I change the administrator password without first running the /savcred switch, all users will be disassociated with the administrator? Where do I use the /savcred switch. This sounds like it may be on target as I did change the administrator password awhile ago to make it more secure. Are you saying that when I initially set up my computer, I (somehow) saved the admin's credentials so that whenever I change the password, the credentials remain the same? (Obviously, you can see I am a little behind you in all this!)
Second, what do you mean by do not assume any system state? This is a stand alone computer, not on a network and I have no mapped drives, just administrator and 2 user accounts which have always belonged to the power user group.
Where you say "Specify the /Profile swith in the runas command" it sounds like you are referring to using runas in command mode. I don't have runas available anymore when I right click on an icon on the desktop. If I change a user to the administrator group, then the user has runas available. When the user is anything else, it disappears. It sounds like I need to re-establish a connection between users and the administrator's new password but I don't know how to do that.
Second, what do you mean by do not assume any system state? This is a stand alone computer, not on a network and I have no mapped drives, just administrator and 2 user accounts which have always belonged to the power user group.
Where you say "Specify the /Profile swith in the runas command" it sounds like you are referring to using runas in command mode. I don't have runas available anymore when I right click on an icon on the desktop. If I change a user to the administrator group, then the user has runas available. When the user is anything else, it disappears. It sounds like I need to re-establish a connection between users and the administrator's new password but I don't know how to do that.
The basics:
Yes changing the Administrator password will confound runas. See this related Hotfix announcement:
What I do is a workaround: I create a fake user account with local Administrator privileges to handle any runas or Scheduled Tasks. You can dump a lot of Group Policy security on this user, just do not deny what is needed for the task.
runas this fake user account.
Yes changing the Administrator password will confound runas. See this related Hotfix announcement:
What I do is a workaround: I create a fake user account with local Administrator privileges to handle any runas or Scheduled Tasks. You can dump a lot of Group Policy security on this user, just do not deny what is needed for the task.
runas this fake user account.
-
2
- #5
RunAs missing from contextual menu
thread779-364976
run as error
thread779-422833
See if this setting in Group Policy has become enabled.
In the left pane of the Group Policy console, expand the User Configuration node.
Expand Administrative Templates, and then expand Windows Components.
Click the Windows Explorer folder.
In the right console pane, double-click Do not request alternate credentials.
294676 - HOW TO: Enable and Use the "Run As" Command When Running Programs in Windows
Does holding the "Shift" key down while right-clicking the exe or shortcut display "Run As"?
thread779-364976
run as error
thread779-422833
See if this setting in Group Policy has become enabled.
In the left pane of the Group Policy console, expand the User Configuration node.
Expand Administrative Templates, and then expand Windows Components.
Click the Windows Explorer folder.
In the right console pane, double-click Do not request alternate credentials.
294676 - HOW TO: Enable and Use the "Run As" Command When Running Programs in Windows
Does holding the "Shift" key down while right-clicking the exe or shortcut display "Run As"?
- Thread starter
- #6
linney, thanks for your response. The Secondary Login service is running and I have been to the microsoft site but that is all they say to do. I am at work now, but when I get home today, I will check the group policy console. I think you may have the answer or at least it sounds like it is on the right track. Once again, thanks for your insight. Sometimes it seems like troubleshooting windows is a lot like rowing a rowboat with a stuck rudder!
- Thread starter
- #7
You could try Running the System File Checker program from the Run Box by typing.....Sfc /Scannow in it and have your XP CD handy. This may fix up any missing or corrupt System Files.
By way of a workaround until you finally solve this problem you could create a shortcut to any exe you which to run. Right-click on the Properties of the shortcut. Click on the Advanced Tab at the bottom. On the resulting page select Run With Different Credentials. Specifies that you want to open a shortcut to a program using a different user name. When the shortcut is opened, you are prompted to specify a user name.
Also you could just use a Cmd Prompt to run as a different user. For Example......
Defrag.
runas /user:localmachinename\administrator "mmc dfrg.msc"
Regedit.
runas /user:localmachinename\administrator regedit
XYZ.exe.
runas /user:localmachinename\administrator "C:\Program Files\XYZ\Xyz.exe"
Perhaps going through your Registry with a Registry Cleaner might bring the option of RunAs back. Which reminds me, has TweakUi etc. been on your computer?
By way of a workaround until you finally solve this problem you could create a shortcut to any exe you which to run. Right-click on the Properties of the shortcut. Click on the Advanced Tab at the bottom. On the resulting page select Run With Different Credentials. Specifies that you want to open a shortcut to a program using a different user name. When the shortcut is opened, you are prompted to specify a user name.
Also you could just use a Cmd Prompt to run as a different user. For Example......
Defrag.
runas /user:localmachinename\administrator "mmc dfrg.msc"
Regedit.
runas /user:localmachinename\administrator regedit
XYZ.exe.
runas /user:localmachinename\administrator "C:\Program Files\XYZ\Xyz.exe"
Perhaps going through your Registry with a Registry Cleaner might bring the option of RunAs back. Which reminds me, has TweakUi etc. been on your computer?
- Thread starter
- #10
linney, I will run sfc and see what that will do. I haven't run a registry cleaner...do you mean like Norton? Also, I believe I downloaded and installed TweakUi but I haven't done anything with it that I recall. I will check when I get home today. Is there anything specific that tweak would do to cause the problem or is there anything that may help solve it?
bcastner, yes, both of my users have always had blank passwords and I have a blank password for my admin login (user with administrative privileges for installation purposes, etc) but the real administrator has a password which I changed to be more secure. I am only guessing that it was changing the administrator password that caused the whole mess. I am not sure because I don't use runas all the time. It seems to be a permission problem to me as my admin user has the runas option and if I give either user administrative privileges, runas reappears in the right-click menu.
bcastner, yes, both of my users have always had blank passwords and I have a blank password for my admin login (user with administrative privileges for installation purposes, etc) but the real administrator has a password which I changed to be more secure. I am only guessing that it was changing the administrator password that caused the whole mess. I am not sure because I don't use runas all the time. It seems to be a permission problem to me as my admin user has the runas option and if I give either user administrative privileges, runas reappears in the right-click menu.
Task Scheduler Does Not Run Tasks When "Run As" User Account Has No Password
- Thread starter
- #12
bcastner, I am not running task scheduler for anything, but I will give the users a password and see if that helps. I am considering reinstalling xp over itself as I have read that this may repair things. As I understand it, after I do this, I will have to reinstall all service packs and updates. I am loathe and I do mean loathe (dramatical emphasis intended) to do this because I have a 56k modem at home as I live in the forboding area of California which is beyond the 17,000 foot limit.
Any input/advice on this option would be greatly appreciated as I have so much stuff on this computer that I really don't want to scrap it and reinstall fresh.
Any input/advice on this option would be greatly appreciated as I have so much stuff on this computer that I really don't want to scrap it and reinstall fresh.
runas makes a Task Scheduler entry. It is not an independent process, just a command line utility to access the Task Scheduler. The Task Scheduler hates blank or empty passwords.
Second point, are you sure the Task Scheduler is running under all the user accounts?
Control Panel, Administrative Tools, Services, Task Scheduler. Should be Automatic as startup type, and running.
Third point, you might investigate using the Resource Kit tools AT and SOON:
These offer other avenues to approach the scheduled task.
Bill
Second point, are you sure the Task Scheduler is running under all the user accounts?
Control Panel, Administrative Tools, Services, Task Scheduler. Should be Automatic as startup type, and running.
Third point, you might investigate using the Resource Kit tools AT and SOON:
These offer other avenues to approach the scheduled task.
Bill
In the interest of completeness, let me note two relatively obscure potential problems:
1. That NTFS permissions have been removed to SYSTEM, Everyone or some other change.
This article discusses the problem in terms of virutual memory settings, but the underlying issue is what I want you to make sure you are clean with (obscure, but possible source of your problem):
2. Possibly obscure problem #2: Your DCOM settings are incorrect.
I do not currently have a link to the XP version of this document, but the issue does occur. The only difference in the details of the workaround is that under XP you have a more GUI interface than with Win2k, you click on the little computer icon at roughly screen center to access the DCOM details:
But I honestly believe if you add real passwords to all user accounts it will make XP much happier.
1. That NTFS permissions have been removed to SYSTEM, Everyone or some other change.
This article discusses the problem in terms of virutual memory settings, but the underlying issue is what I want you to make sure you are clean with (obscure, but possible source of your problem):
2. Possibly obscure problem #2: Your DCOM settings are incorrect.
I do not currently have a link to the XP version of this document, but the issue does occur. The only difference in the details of the workaround is that under XP you have a more GUI interface than with Win2k, you click on the little computer icon at roughly screen center to access the DCOM details:
But I honestly believe if you add real passwords to all user accounts it will make XP much happier.
- Thread starter
- #15
bcastner, I'll check this all out when I get home. I went to the link you posted, but it gave me a 404 error. Do you have a more recent link? What do you think about reinstalling over the present installation? I have dsl at work so I have downloaded sp1a and rollup 1.
Also, what about TweakUI? Was there something I should do or shouldn't do? I really appreciate your help.
John
Also, what about TweakUI? Was there something I should do or shouldn't do? I really appreciate your help.
John
Let me provide another link to the same Petri resource:
I have had pasted links issue on Tek-Tips the last couple of days, and I suspect the problem is something odd with the LinkStash program I am using.
I have had pasted links issue on Tek-Tips the last couple of days, and I suspect the problem is something odd with the LinkStash program I am using.
I think "Bcastner" mention of giving your general Administrative user a password too would be worth a try.
The mention I made of Tweakui was just an rough guess I would not concern yourself too much with that suggestion if you are not a "Tweaker".
Registry Cleaner programs come in all sorts of packages, such as Norton etc. Some links.
jv16 PowerTools 1.4 released but not freeware (or RegSupreme)
Freeware. RegSeeker.
For future reference so you retain updates. Do you updates manually.
By following these instructions you can save any update to disk for later installation or reinstallation.
Perform the following steps to view the Windows Update Catalog:
Visit the Windows Update Web site:
Allow it to Scan for Updates and note the details of any updates offered.
Return to the home page of the Windows Update Web Site.
Click Personalize Windows Update.
Select the Display the link to the Windows Update Catalog under See Also check box.
Click Save Settings.
A Windows Update Catalog link appears under See Also. Click the Windows Update Catalog link.
Click Find updates for Microsoft Windows operating systems.
Click the appropriate product (windows XP SP1 etc.), and then click Search.
Click Recommended or Critical Updates.
Locate the updates you want, and then click Add.
Click Go to download basket.
In the Type or browse to the download location of your choice box, type the full path for the folder in which you want to save the patch. Or, click Browse to browse to the folder.
Click Download Now.
The mention I made of Tweakui was just an rough guess I would not concern yourself too much with that suggestion if you are not a "Tweaker".
Registry Cleaner programs come in all sorts of packages, such as Norton etc. Some links.
jv16 PowerTools 1.4 released but not freeware (or RegSupreme)
Freeware. RegSeeker.
For future reference so you retain updates. Do you updates manually.
By following these instructions you can save any update to disk for later installation or reinstallation.
Perform the following steps to view the Windows Update Catalog:
Visit the Windows Update Web site:
Allow it to Scan for Updates and note the details of any updates offered.
Return to the home page of the Windows Update Web Site.
Click Personalize Windows Update.
Select the Display the link to the Windows Update Catalog under See Also check box.
Click Save Settings.
A Windows Update Catalog link appears under See Also. Click the Windows Update Catalog link.
Click Find updates for Microsoft Windows operating systems.
Click the appropriate product (windows XP SP1 etc.), and then click Search.
Click Recommended or Critical Updates.
Locate the updates you want, and then click Add.
Click Go to download basket.
In the Type or browse to the download location of your choice box, type the full path for the folder in which you want to save the patch. Or, click Browse to browse to the folder.
Click Download Now.
- Thread starter
- #18
linney, I'll do that when I get home and see if giving all users a password works. Otherwise, what do you think about reinstalling over itself? I have read that this will refresh all windows files but what are the repercussions beyond having to reinstall all service packs, etc?
Apart from having to do your Windows Updates there is no real problems with a repair installation. There is some problems when using this to repair registry errors as the Windows repair may just copy over the faulty registry settings into the "repaired" installation.
I recommend these steps in this order when encountering problems of a general nature. Each step is a bit more drastic than the proceeding one. As you can see the repair is near the bottom of the list. I'd certainly give SFC /Scannow a run before doing any repair.
Linney's list.
See if System Restore will get you back to a restore point before your problem with Explorer.
Try Safe Mode (Do you have this problem in Safe Mode?).
Try running ChkDsk to check your drive for errors. Right click your Drive icon/ Properties/ Tools/ Error Checking.
Run the System File Checker program from the Run Box by typing.....Sfc /Scannow in it and have your XP CD handy.
HOW TO: Verify Unsigned Device Drivers in Windows XP
If they don't work you could try repairing windows itself by running it over itself. You will lose all your windows updates but your files will be untouched.
How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)
And finally a complete clean install and reformat of XP.
I recommend these steps in this order when encountering problems of a general nature. Each step is a bit more drastic than the proceeding one. As you can see the repair is near the bottom of the list. I'd certainly give SFC /Scannow a run before doing any repair.
Linney's list.
See if System Restore will get you back to a restore point before your problem with Explorer.
Try Safe Mode (Do you have this problem in Safe Mode?).
Try running ChkDsk to check your drive for errors. Right click your Drive icon/ Properties/ Tools/ Error Checking.
Run the System File Checker program from the Run Box by typing.....Sfc /Scannow in it and have your XP CD handy.
HOW TO: Verify Unsigned Device Drivers in Windows XP
If they don't work you could try repairing windows itself by running it over itself. You will lose all your windows updates but your files will be untouched.
How to Perform an In-Place Upgrade (Reinstallation) of Windows XP (Q315341)
And finally a complete clean install and reformat of XP.
- Status