Share via

RANU: smarter CPL and MSC

  • Article

I wish that .CPLs and .MSCs were smarter about normal users. I want to be a normal user, open a Control Panel applet, and have it prompt me for credentials if needed. Same thing for the administrative tools.

Here's what I do instead.

I create a set of shortcuts in a folder called “Control Panel”:

runas.exe /user:Administrator "control access.cpl"

I even set the icon by pointing it back at the .CPL file.

I do something similar with a folder called “Administrative Tools”:

runas.exe /profile /user:Administrator "mmc %windir%\System32\compmgmt.msc"

Both folders go into the “Admin Tools“ folder, along with

CMD w/ network

runas.exe /env /user:Administrator "runas.exe /user:%USERDOMAIN%\%USERNAME% /env /netonly \"cmd\""

 

There’s a bug in Windows XP where certain controls running in this mode just won’t paint.  It seems to be fixed in Windows Server 2003.  Don’t know about Windows XP SP2.

 

CMD

runas.exe /env /user:Administrator "cmd"

 

Explorer w/ network. Enable “Launch folder windows in a separate process”, as both yourself & Administrator.

 

runas.exe /env /user:Administrator "runas.exe /user:%USERDOMAIN%\%USERNAME% /env /netonly \"explorer\""

 

Task manager

 

runas.exe /user:Administrator taskmgr.exe

 

Regedit

 

runas.exe /user:Administrator regedit.exe –m

 

The Admin Tools folder then becomes a toolbar on my taskbar.  With all this in place, I can get by as a normal user.

Comments

  • Anonymous
    June 21, 2004
    ;o)
    Completely agree

    Even more - no needs to ask Administrator account for user actions.
    But if user need to change something affecting not only his account - he must be prompted for login.

    Running select CPL's as
    Administrator can change Administrator configuration instead of current user one.

    P.S> I wish ITG groups do not give Administrator password for Windows team development workstations or restrict Administrator account usage by time-limits (ex. 1 hour per day).
    This way Windows team will make it's possible to run most of Windows apps without admin rights ;o))

  • Anonymous
    June 21, 2004
    This is what OSX does and it makes it sooo easy to run as normal user and still being able to do administrative tasks without (fast-)swicthing users. Even the installer is smart enough to ask for roots password if it requires to do system canges (updates and friends).
  • Anonymous
    June 21, 2004
    Bjoern: I'm still not jealous.
  • Anonymous
    June 21, 2004
    The comment has been removed
  • Anonymous
    June 21, 2004
    Drew: It looks like you've explored this pretty deeply. I'm glad to see that.

    regedit is single instance, unless you pass the -m flag.

    explorer is single instance unless you set the "Launch folder windows in a separate process" in the context that is doing the launching (administrator).

    RANU first mentioned in http://blogs.msdn.com/jaybaz_ms/archive/2004/06/21/161609.aspx.
  • Anonymous
    June 21, 2004
    Oh, I didn't meant to force anyone to switch or such a thing: I'm a happy XP user who happend to have the chance to play with OSX :)
  • Anonymous
    July 16, 2004
    anyone know of any good 3rd party file manager apps that would work well under an administrator secondary logon (that is what runas uses, right)? i want to find something portable to use so I don't have to GP-enable every pc in my domain for explorer.exe ..