I'm working with a tool that runs programs on behalf of hundreds users on multiple machines. This works fine on Linux because I can just run as "root" and use su or sudo to impersonate them without a password.
On Windows, runas has the "/savecred" option, but that won't help if there are hundreds of machines and hundreds of users. Typing 10,000 passwords that I should not know just isn't going to happen.
On the accounting side, this work should be done by the user who requested it so becoming their account is the right thing to do.
Now, I was under the impression that there was an ACL that could be applied to an account that would allow it to run a process as another user without requiring a password. Has anyone heard of this? I've dug around here already and no such luck.
If there is, how do you set it up and can I make use of runas or do I have to write a C/C++ app to make my own tool?
Thanks!
0 Answers