nonadmin

DropMyRights

DropMyRights is a tool written by Michael Howard that allows administrators to run internet-facing applications (such as email clients and web browsers) as a non-administrator. You can read about it and download it from his MSDN article "Browsing the Web and Reading E-mail Safely as an Administrator".

Since DropMyRights is a simple command-line tool, it can also be used to create "safe shortcuts" that always bring up an application as non-administrator:

There's a known limitation with using DropMyRights to run Internet Explorer in "C" or "U" mode when accessing web sites that require SSL or SSPI-based user authentication (e.g. NTLM). See this blog post from Mike Smith-Lonergan for details.

There are several useful comments in Michael's blog post about the article. In a follow-up blog post, readers contributed Shell Extensions so that DropMyRights can be invoked directly.

See other Useful Tools

Comments

From User [82.45.234.150] - 6/26/05 8:13 AM

Heh, C:\warez? No wonder you're worried about viruses and spyware.

From jonathanh - 6/26/05 11:19 AM

That screenshot is taken directly from the MSDN article, showing what happens when you type

C:\warez\dropmyrights.exe "c:\program files\internet explorer\iexplore.exe"

:)

 
 
 

Last Modified 1/28/06 10:00 PM