Impersonator Available for Windows NT4/2000/XP/2003 Server
|
Impersonator is an automated "Run As" function of Windows that provides a part of useful options not included in Windows.
With Impersonator you can create a list of programs you need to run with other's users account. And run this list from a shortcut and/or
command line and/or using an GUI of Impersonator. User name and password that you are using to create the list of "Run As" items
are encrypted with a mix of MD5 and RC4 algorithms. Additional option is allows you to hide the user name and the password by running
the Impersonator from the command line with "sec_on" option.
|
Impersonator allows administrators to log on with a non-administrative account and still be able to perform
administrative tasks (without logging off) by running trusted administrative programs in administrative contexts.
In this scenario, system administrators require two user accounts: a regular account with basic privileges, and an
administrative account (this can be a different administrative account for each administrator or a single administrative
account shared among administrators).
|
|
It is good practice for administrators to use an account with restrictive permissions to perform routine, non-administrative tasks, and to use an
account with broader permissions only when performing specific administrative tasks. To accomplish this without logging off and back on,
log on with a regular user account, and then use the Impersonator to run the tools that require the broader permissions.
|
|
WARNING: If you try to start a program, MMC console, or Control Panel item from a network location by using Impersonator,
it might not work because the credentials that are used to connect to the network share are different from the credentials that are
used to start the program. The credentials that are used to run the program may not be able to gain access to the same network share.
|
|
"Run As" list could be managed by the Add/Edit Program screen of Impersonator.
[Screenshot]
|
|
Impersonator can be executed from the command line or from any batch operation.
This is the usage of command line:
Impersonator.EXE [ProgramAlias] [sec_on] [sec_off]
| Switch |
Description |
|
|
| ProgramAlias |
A program alias you've created in Impersonator |
| sec_on |
Turn on security protection of UserNames and Passwords |
| sec_off |
Turn off security protection of UserNames and Passwords |
| /? of /help |
help screen |
|
|
|
![[Screenshot]](javascript:popUp('../images/addeditimpersonator.gif')){kind=link}