Running the application with the Domain Admin account
Answers (7)
In your position, I'd set up a domain account whose sole purpose is to install this application and restrict its privileges accordingly. That way, if its credentials were to "leak" somehow, it would be useless for any other purpose.
Once that's done, you can begin educating the brain-dead vendor in how to deploy enterprise-level software.
How about PSExec? It's designed for remote execution of programs but is perfectly happy to run locally, it's free and the license allows commercial use.
>I have tried with the below command line but didn't work
Just think - for just a nanosecond - about how PSExec is going to handle the command line you've entered.
If you're still struggling after that thought, type 'PSEXEC /?' and all will be revealed.
My apologies. Forget RunAs - it's a command line tool which will prompt for a password. It may be possible to pass the password to it using a pipe but, given the initial question, I think that's a step too far for you.
The main point is that you should use an explicit account for installing from your tool. I know nothing about Matrix: I've not even heard of it or seen it mentioned anywhere. If it can't be set up to run commands using alternative credentials, then you need to consider an alternative route. Bear in mind that that account will also need to be granted access to the database. Hopefully, such access can be organised through AD group membership, as hard-coded database user IDs are a nightmare to administer.
Thanks for the reply.
So do i need to create another Administrator account which can only handle the installation and also able to access the Q drive. I that is the case then can you please post the comand how to run an exe using RUNAS Command
Thanks in Advance - hispeed 9 years ago