Using alternative credentials and the instructions - please clarify

This forum can be browsed by the general public. Posting is limited to current SAPIEN license holders with active maintenance and does not offer a response time guarantee.
Forum rules
DO NOT POST SUBSCRIPTION NUMBERS, LICENSE KEYS OR ANY OTHER LICENSING INFORMATION IN THIS FORUM.
Only the original author and our tech personnel can reply to a topic that is created in this forum. If you find a topic that relates to an issue you are having, please create a new topic and reference the other in your post.

Any code longer than three lines should be added as code using the 'Select Code' dropdown menu or attached as a file.
User avatar
Patchm00
Posts: 9
Joined: Sat Feb 09, 2008 12:33 pm

Using alternative credentials and the instructions - please clarify

Post by Patchm00 » Fri Dec 30, 2016 9:06 am

Product, version and build: PrimalScript Trial 7.2.97
32 or 64 bit version of product: 64
Operating system: Windows 8.1
32 or 64 bit OS: 64

Trying the trial version for seeing if this will help our company with using runas admins to deploy software.

Reading instructions on using alternative credentials and am not clear about something. The instructions say:

To run a script elevated ("Run as administrator"):
If the end-user is a not a member of the Administrators group on the computer, create two executable files.
Create an empty executable (no files or a .txt file) and set Run Mode to RunAs and specify the credentials of an administrator. This executable elevates the session.
Create an executable with the script and an elevation manifest.

What i'm unclear about is how do you call these? if it was one executable it's easy but there are two and the first one has to be empty so how does it call the second one? Do you create a batch to call them or do you have to tell the user to click on one then the other ?

thanks

DevinL
Site Admin
Posts: 1098
Joined: Mon Aug 17, 2015 2:25 pm

Re: Using alternative credentials and the instructions - please clarify

Post by DevinL » Fri Dec 30, 2016 9:26 am

The instructions do say to create an empty executable but what it's supposed to do is call the 2nd executable that actually needs the elevated session in order to work properly.

For example, you have the first executable (Exe A) on your desktop, and the second one (Exe B), which actually needs the administrator rights to perform its functions, is located in C:\Temp\Exe B.exe. Exe A would have the Run Mode set to RunAs and have the admin credentials you need, and its sole purpose is to call the exe in C:\Temp\Exe B.exe which will launch it with the correct rights.

Alex is currently working on a blog post to help explain this in a much more concise way and when he completes it I'll be sure to post it here in case my explanation wasn't enough.
DevinL
SAPIEN Technologies, Inc.

User avatar
Patchm00
Posts: 9
Joined: Sat Feb 09, 2008 12:33 pm

Re: Using alternative credentials and the instructions - please clarify

Post by Patchm00 » Fri Dec 30, 2016 10:58 am

thanks,, that makes sense

DevinL
Site Admin
Posts: 1098
Joined: Mon Aug 17, 2015 2:25 pm

Re: Using alternative credentials and the instructions - please clarify

Post by DevinL » Thu Jan 19, 2017 10:04 am

Hey Patchm00,

We've released a blog post recently covering how to do just this, please take a look: https://www.sapien.com/blog/2017/01/19/ ... nistrator/
DevinL
SAPIEN Technologies, Inc.