Allow user to run a program with admin privs
 

We just "upgraded" to a new manufacturing system package and the developers
had this "fantastic" idea on how great it would be to set it up so when we
apply a patch to the server it will prompt the clients to auto update.
Unfortunately, the auto update requires user to be local admins.

Is there a way to have a program run with local admin privs no matter who is
logged on? Also, without prompting for any credentials

Allow user to run a program with admin privs
 

You can use runas /savecred but this will open a security hole the size
of Texas on your machine and for all intents and purposes if you do this
the users will have complete rule over the machine. Any half ass clever
malicious person or malware writer would immediately try to exploit this
security hole.

John

Jordan wrote:
We just "upgraded" to a new manufacturing system package and the developers
had this "fantastic" idea on how great it would be to set it up so when we
apply a patch to the server it will prompt the clients to auto update.
Unfortunately, the auto update requires user to be local admins.

Is there a way to have a program run with local admin privs no matter who is
logged on? Also, without prompting for any credentials

Allow user to run a program with admin privs
 

Are you not able to 'push' updates out to the client machines? I
actually think you would prefer that method...that way, you're certain
that the updates were applied.

To give a common example; where I work, malware signatures and McAfee
program updates (as needed) get pushed to all workstations overnight.

Your (l)users should not be updating anything on their machines, other
than their own passwords.
---
Leonard Grey
Errare humanum est

Jordan wrote:
We just "upgraded" to a new manufacturing system package and the developers
had this "fantastic" idea on how great it would be to set it up so when we
apply a patch to the server it will prompt the clients to auto update.
Unfortunately, the auto update requires user to be local admins.

Is there a way to have a program run with local admin privs no matter who is
logged on? Also, without prompting for any credentials