Windows Server Hacks: Disable "Run As"
Subject:   Doesn't always work
Date:   2004-03-17 11:58:22
From:   mitchtulloch
Response to: Doesn't always work

Good suggestion, a hash rule might be better here, thanks! Because of Windows File Protection you can't move runas.exe to another folder but you can still copy it and run the copied version of the command.

I like the idea of modifying the ACL for runas.exe to remove the Read & Execute permissions for Authenticated Users. How would you deploy this change to a group of XP machines in a domain?

1 to 1 of 1
  1. Doesn't always work
    2004-03-18 12:48:37  jmbwi [View]

    • Doesn't always work
      2004-07-22 04:47:45  Mysidia [View]

    • Mitch Tulloch photo Doesn't always work
      2004-03-18 13:21:12  Mitch Tulloch | O'Reilly Author [View]

1 to 1 of 1