[unisog] Admin Password Management

Jens Haeusser jens.haeusser at ubc.ca
Wed Feb 23 05:10:18 GMT 2005


Runas is a replacement for su, not for sudo- with runas you need to enter
the administrative password, and can then run any command as root.

It should be possible to creatively use runas in conjunction with Group
Policy Objects in order to mimic sudo- set up different account with
permissions limited by GPOs, and the runas /user:backupadmin backupcommand,
runas /user:adsadmin mmc, etc.

Jens Haeusser
Manager, Information Security Office
University of British Columbia
 

-----Original Message-----
From: unisog-bounces at lists.sans.org [mailto:unisog-bounces at lists.sans.org]
On Behalf Of Peter Van Epp
Sent: Tuesday, February 22, 2005 7:54 PM
To: UNIversity Security Operations Group
Subject: Re: [unisog] Admin Password Management

	Format C:, install FreeBSD or Linux, use sudo problem solved? :-)
Actually it probably should be possible using runas I think so perhaps
someone
has.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada


> 
> Has anyone produced an equivalent of sudo for windows?
> 
> Cheers, Russell



> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog

_______________________________________________
unisog mailing list
unisog at lists.sans.org
http://www.dshield.org/mailman/listinfo/unisog




More information about the unisog mailing list