nonadmin

WinSUDO

Inspired by the Makemeadmin utility by Aaron Margosis, WinSUDO is a very simple, but useful program written by Paul Blair. It uses the same concept as Makemeadmin, but takes it much further, allowing the user to launch almost any program under the users account, but with an administrator token.

The program uses a server/client approach which allows single authentication (only the user's password must be entered) when running a program. The server portion is a script that runs as a Windows service and listens for client requests. The client is invoked when a user right clicks on a shortcut or executable in Windows. If the user has access to the sudo service (by default, controlled by membership in a local group called "sudoers") the server adds the user to the local administrators group and then removes the user once the program is run.

As of now, WinSUDO supports the launching of .exe, .cpl. .msc, .msi (install/repair/unistall), and .lnk files. It logs all use of the service to a text file in %systemroot%\security\logs\. The service automatically creates a local group called "sudoers" upon startup and sets to appropriate permissions that regulate access.

Right now, WinSUDO is in its very early stages, has no documentation, and may contain bugs, but it is functional. Adventurous users who don't mind testing things out, or would like to help out can visit the WinSUDO homepage at and download the latest version.

http://winsudo.toadlife.net

WinSUDO is and always will be completely free for any use.

Comments

From Vittorio [62.108.224.101] - 1/27/06 1:22 AM

I wrote a similar tool called MyRunAS, for more details see here:http://vittoriop77.altervista.org/myprojects.php

However, congratulations for WinSUDO !!!Laughing

From 203.131.88.74 - 6/6/06 4:46 AM

Taken from my post in (http://nonadmin.editme.com/MakeMeAdmin) 

There are other security issues that would arise even when using MakeMeAdmin and WinSUDO. Example, I tried using it to run a certain game (FreeStyleOnline), the game worked flawlessly, but clicking on one of the links of the game's Welcome/Splash screen spawned an Internet Explorer with access similar to that of an admin. With this spawned IE, I am able to delete any files from say "Program Files" which a restricted user cannot. In fact, I was also able to create a new user from this spawned IE, actually I can create a user belonging to Administrators group through this way which for me breaks security.

Perhaps it would be better if, we can set certain executables/programs to run with access similar to that of an admin but all of its child processes should have access of a user or better yet "guest". ^^

There's also "runasspc" (i use it), I don't know if your guys have tried it.

 
 
 

Last Modified 3/12/06 6:08 PM