Announcement

Collapse
No announcement yet.

Hyena will not allow me to explorer with my elevated permissions (runas)

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Hyena will not allow me to explorer with my elevated permissions (runas)

    Situation Requirement:
    I logon to the domain with an account that does not have administrator permissions. When I run Hyena, I use the “run asâ€‌ option and use my administrator username/password.

    For the most part everything works great and it is a great tool to use, just one thing does not work for me.

    When I ask hyena to view the properties of a domain user account, and proceed to the “profileâ€‌ tab I see the location of the “Home Directoryâ€‌. When I click on “Exploreâ€‌ to see the contents of the Home Directory, the explorer window opens with permissions from my non administrator account instead of the administrator account.

    After doing some investigation, here is what I have discovered.

    - Problem does not exist within Windows 2000, but does in Windows XP. Have not tested Vista as we do not have this OS within our network.

    I discovered that the process within task manager “explorer.exeâ€‌ does not open a second process ( a second explorer.exe )when I click on explore within Hyena. So doing some initial research, it looks like Microsoft has stopped this due to Virus reasons.

    Now when I google this problem, I have discovered multiple solutions however am still not able to get this resolved

    Solution #1 found on the Internet-> When you open Windows Explorer, go to “tools -> folder options…â€‌. Go to the tab “viewâ€‌ tab and select “Launch Folder windows in Separate processâ€‌

    I made this change on the PC for my non-administrator account and the administrator account with no success

    Solution #2 found on the Internet-> At a DOS level, run the “runas.exeâ€‌ on explorer.exe with my administrator account so that it creates a second explorer.exe

    I did this and when I am in using Hyena, I click on explorer the Home directory, it defaults back to the explorer.exe process that is running with my non-administrator account

    Solution #3 found on the Internet-> User iexplorer.exe instead of explorer.exe

    I can not find in Hyena where I can configure it to use iexplorer.exe instead of explorer.exe.

    Solution #4 found on the Internet-> When you execute explorer, run it as follows
    “C:\windows\explorer.exe \\server\pfleury\ /separateâ€‌

    Again, I can not find out where in Hyena to add “/separateâ€‌ at the end of the explorer button function..

    - - -

    Help…

  • #2
    Re: Hyena will not allow me to explorer with my elevated permissions (runas)

    Thanks for explaining the problem so well and trying different solutions. You would be surprised at how many vague 'it does not work' problems we get.

    Hyena uses the Microsoft 'ShellExecute' API with the 'explore' option, so there isn't much to play around with or change here. But some things that you can check on and see if we can come up with a workaround:

    1. Make sure that explorer isn't running when you run Hyena. It seems that Explorer will always attach to itself if its already running so I wanted to make sure in your tests that it was not running when you ran Hyena and used the 'Explore' buttons.

    2. Try this: navigate to the home directory or profile using Hyena's left window. Right click on the directory in the left window and select More Functions->Open. I want to see if the window 'opened' by Explorer has this same problem as the 'explore' option. Try this change also after you have set the option in Explorer to open windows in a separate process, as this is the type of window that its probably meant to change.

    Thanks
    Kevin Stanush
    SystemTools Software Inc.

    Comment


    • #3
      Re: Hyena will not allow me to explorer with my elevated permissions (runas)

      With respect to suggestion #1 –
      I Logged in with my Non-Administrator Account. Using Task Manager; I killed explorer.exe. This however removed my taskbar as well. Now I need a version of explorer.exe running so I can get to the Hyena icon, so within Task Manager, I executed a “runasâ€‌ command and launched explorer.exe with my administrator account.

      Now this most definitely fixed the problem, but it really didn’t.

      There are two reasons for everyone here to logon with our non-administrative account. One is MS Outlook and MS Internet Explorer. Both applications need to run with non-administrative privileges so no virus can propagate on our network with administrator rights and same with surfing the internet. The proposed solution #1 puts my MS Outlook and MS Internet Explorer with admin rights. Unfortunately this will not fly with us…

      With respect to suggestion #2 –
      Nope, Hyena tried to open the folder with my non-administrator account…

      Arggg.. I wish Microsoft stops helping us…

      Comment


      • #4
        Re: Hyena will not allow me to explorer with my elevated permissions (runas)

        Let me know if you have any bookmarks or urls to share on the descriptions of this problem that you found on the internet. I might need to open a support case with M$, and it helps to show them KB articles or something more.

        Thanks
        Kevin Stanush
        SystemTools Software Inc.

        Comment


        • #5
          Re: Hyena will not allow me to explorer with my elevated permissions (runas)

          As per your request...
          http://support.microsoft.com/kb/225035
          http://blogs.msdn.com/aaron_margosis...07/175488.aspx
          http://techrepublic.com.com/5208-623...213020&start=0

          Comment


          • #6
            Re: Hyena will not allow me to explorer with my elevated permissions (runas)

            I'll open a support case with Microsoft on this.
            Kevin Stanush
            SystemTools Software Inc.

            Comment


            • #7
              Re: Hyena will not allow me to explorer with my elevated permissions (runas)

              As a test, I want to see what this does for you:

              Click on the main menu in Hyena, Tools->Tools->Tool Settings. Click New and type Explore as the Caption, and for the command type:

              explorer.exe /separate

              Save that, then right click on any directory and see if the security context of the new explorer window is what you expect. I know the resulting window won't be focused on the right directory, but haven't looked into the right command line parameters for that yet.
              Kevin Stanush
              SystemTools Software Inc.

              Comment


              • #8
                Re: Hyena will not allow me to explorer with my elevated permissions (runas)

                Ok, that worked...

                Comment


                • #9
                  Re: Hyena will not allow me to explorer with my elevated permissions (runas)

                  Try this out. Download a preliminary version of Hyena v7.2 (beta) from:
                  http://www.systemtools.com/download/hyena72.zip

                  You can rename the existing hyena.exe if you want to and copy the hyena.exe from this .zip file into your current installation directory.

                  Then, to create a command to run Explorer under the same security context as Hyena is being run under, two different registry entries need to be created under:

                  HKCU\Software\Adkins Resource\Hyena\Advanced

                  The registry values to create under this key are named 'ShellOpenCommand' and 'ShellExploreCommand'. These registry values must have the REG_SZ data type. After creating these values, Hyena will use any command string entered for these values when the Explore or Open options are used on any directory context menus, as well as the Explore buttons on user property dialogs. Commands that should produce the same behavior as the standard Windows shell function are:

                  Open (ShellOpenCommand) - explorer.exe /root,%E%

                  Explore (ShellExploreCommand) - explorer.exe /e,%E%

                  Hyena will replace %E% with the directory path that is selected.
                  Kevin Stanush
                  SystemTools Software Inc.

                  Comment


                  • #10
                    Re: Hyena will not allow me to explorer with my elevated permissions (runas)

                    It worked… Thank you very much…

                    Comment


                    • #11
                      Re: Hyena will not allow me to explorer with my elevated permissions (runas)

                      Thanks for testing. If you want to join the official beta list, send a blank email to [email protected]. I hope to release the v7.2 beta next week.

                      Also, let me know if you have tweaked the open/explore commands any so that I can update the documentation.

                      Thanks
                      Kevin Stanush
                      SystemTools Software Inc.

                      Comment

                      Working...
                      X