NTFS Security Settings

[Danial]

Hi,
I have Windows XP installed, i usually log in as the user "danial" but i have made some folder only accessible to "Administrator" only. Is there any way i can open those folder without logging out as logging in as "Administrator".

Is there something similar to the Windows 2000 system, where you can Shift+Right click and run an executeable as "Administrator" by providing admin password.

Thanks in advance.

Danial

[Pirate]

Grant the other user write or read permission on that folder only . This is the only solution I can think of right now .

[Danial]

Originally posted by Pirate
Grant the other user write or read permission on that folder only . This is the only solution I can think of right now .

I dont really want to grant any access right to any other users other then Administrator. I am looking for a way where the Administrator can access those folders regarldless of who is logged in. If it can be done through code i would interested in that too.

Anyone got any ideas ?

[Pirate]

OK , what about using any 3 party tool ?

[Danial]

Originally posted by Pirate
OK , what about using any 3 party tool ?

Do know of any 3rd party tools that can provide me with this feature?

Thanks.

[Pirate]

All it does is protecting the file or the folder with a password regardless of the logged in user . You wanna have a look at some ?

[papacorn]

...

runas [options...] program | or runas /? at the cmd.

[Danial]

Originally posted by papacorn
...

runas [options...] program | or runas /? at the cmd.

Pirate, thanks but no i am not after Folder Encryption.

Papacorn, i think you have probably solved my problem, i am just trying out the command, and will probably write a simple vb tool which adds a "Open As.." menu to the windows Context Menu.

I will let u know if it works.

Thanks a lot papa !!

Danial

[Ideas Man]

Runas only works for executables, not files or folders. There is no way of opening a file if you do not have permission to it. If the user is an administrator and you want to frequently use it, add Administrators then both can. Having Administrator only gives you no access unless you logon as administrator. To find out what permissions you have under Windows XP, goto the security tab, click advanced and effective permissions. Click select and type in a username and click ok. The permissions that they person has will be displayed.

[Danial]

Originally posted by Ideas Man
Runas only works for executables, not files or folders.

RUNAS USAGE:

RUNAS [ [/noprofile | /profile] [/env] [/netonly] ]
/user:<UserName> program

RUNAS [ [/noprofile | /profile] [/env] [/netonly] ]
/smartcard [/user:<UserName>] program

/noprofile specifies that the user's profile should not be loaded.
This causes the application to load more quickly, but
can cause some applications to malfunction.
/profile specifies that the user's profile should be loaded.
This is the default.
/env to use current environment instead of user's.
/netonly use if the credentials specified are for remote
access only.
/savecred to use credentials previously saved by the user.
This option is not available on Windows XP Home Edition
and will be ignored.
/smartcard use if the credentials are to be supplied from a
smartcard.
/user <UserName> should be in form USER@DOMAIN or DOMAIN\USER
program command line for EXE. See below for examples

Examples:
> runas /noprofile /user:mymachine\administrator cmd
> runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"
> runas /env /user:[email protected] "notepad \"my file.txt\""

It does work for files indeed, i havent been able to make it work for folders yet.

[Ideas Man]

Oh, well so you can, learn something new every day , Still useless if you don't know the file name.

[Ideas Man]

Just though of something, try:

runas /env /user:[email protected] "explorer.exe C:\"

That might work.

[Pc_Madness]

Give the Daniel account Administrative rights, or, move the folder into a one of the Shared Documents Folders.

[wrack]

XP has got a nice feature called quick user switch. You can switch to Administrator while still logged on as daniel.

Will do the trick.