Monday, April 2, 2007

Admin Run As with IE 7

After you push down IE 7 through SMS you will find a curious problem. As a security fix Microsoft will no longer allow you launch Internet Explorer as an administrator then type in a c:\ and get to Explorer as an administraor. The new window will launch in the current user's security context. So to get around it you can use this reg file. Once installed it will allow you to right click on any folder or the start button and launch explorer as the system administrator or the Domain Admin.
Granted this can be done easily by just using the RunAs command but this is faster and a click away.

-----------------------------
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\OpenAsAdminUser0]
@="Open An Explorer Window as the Domain Admin"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\OpenAsAdminUser0\command]
@="runas.exe /user:MyDomain\\administrator \"explorer.exe /SEPARATE\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\OpenAsAdminUser1]
@="Open An Explorer Window as the Local Administrator"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shell\OpenAsAdminUser1\command]
@="runas.exe /user:Administrator \"explorer.exe /SEPARATE\""

-----------------------------