Is it possible to use

Is it possible to use "Run As" in a shutdown script?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Is it possible to use "Run As" in a shutdown script? SMS_Wannabe 01-07-2006
Posted by =?Utf-8?B?U01TX1dhbm5hYmU=?= on January 7, 2006, 11:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
We are trying to use "Run As" in a shutdown script; however, since shutdown
scripts run on the local system account, access to "run as" is denied. Is
there any solution to this problem; either giving local system permissions to
run as, or running shutdown scripts under a different security context? I do
not think a different security context can run the shutdown scripts since
user hives are unloaded by the time the scripts run, but I am not certain.

Any ideas? Perhaps we should create a different solution altogether?



background info:
Shutdown scripts run as local system account:
http://support.microsoft.com/kb/198642

The Run As command cannot be used from the LocalSystem account
http://support.microsoft.com/default.aspx?scid=kb;en-us;294676&sd=tech

Although we are attempting this process with a Windows 2003 SP1 system, we
assume the articles linked above still apply.

Posted by Lanwench [MVP - Exchange] on January 7, 2006, 11:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options


> We are trying to use "Run As" in a shutdown script; however, since
> shutdown scripts run on the local system account, access to "run as"
> is denied. Is there any solution to this problem; either giving
> local system permissions to run as, or running shutdown scripts under
> a different security context? I do not think a different security
> context can run the shutdown scripts since user hives are unloaded by
> the time the scripts run, but I am not certain.
>
> Any ideas? Perhaps we should create a different solution altogether?
>
>
>
> background info:
> Shutdown scripts run as local system account:
> http://support.microsoft.com/kb/198642
>
> The Run As command cannot be used from the LocalSystem account
> http://support.microsoft.com/default.aspx?scid=kb;en-us;294676&sd=tech
>
> Although we are attempting this process with a Windows 2003 SP1
> system, we assume the articles linked above still apply.

I think you're correct & this is normal behavior. What is the shutdown
script supposed to do? There may be a better way.



Posted by Joe Richards [MVP] on January 7, 2006, 6:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Runas depends on an API call that will not let localsystem use it with XP SP2
and later OS levels. There is nothing you can do to force it to work. You would
need an application that instead uses logonuser (vs CreateProcessWithLogonW) to
execute what you need.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


SMS_Wannabe wrote:
> We are trying to use "Run As" in a shutdown script; however, since shutdown
> scripts run on the local system account, access to "run as" is denied. Is
> there any solution to this problem; either giving local system permissions to
> run as, or running shutdown scripts under a different security context? I do
> not think a different security context can run the shutdown scripts since
> user hives are unloaded by the time the scripts run, but I am not certain.
>
> Any ideas? Perhaps we should create a different solution altogether?
>
>
>
> background info:
> Shutdown scripts run as local system account:
> http://support.microsoft.com/kb/198642
>
> The Run As command cannot be used from the LocalSystem account
> http://support.microsoft.com/default.aspx?scid=kb;en-us;294676&sd=tech
>
> Although we are attempting this process with a Windows 2003 SP1 system, we
> assume the articles linked above still apply.

Similar ThreadsPosted
shutdown logfile January 21, 2006, 6:29 am
Strange Message on Shutdown...! July 13, 2005, 7:22 pm
Disabling Shutdown and Restart July 27, 2005, 10:15 am
Disable shutdown option August 24, 2005, 2:35 pm
How to audit WHO has shutdown a server? March 9, 2006, 9:14 am
Ghost User(s) -- When trying to shutdown June 9, 2006, 7:28 pm
ports for shutdown -s -m machine_name? April 3, 2007, 7:38 am
Patches installed during shutdown (XP SP2) April 10, 2007, 8:22 pm
Patches installed during shutdown August 28, 2007, 8:15 pm
Patches installed during shutdown August 28, 2007, 8:14 pm

The site map in XML format XML site map

Contact Us | Privacy Policy