Code

Programming Languages: C#

License: BSD License

Repositories

browse code, statistics svn co https://sudowin.svn.sourceforge.net/svnroot/sudowin sudowin

Show:

What's happening?

  • Windows GUI pops up every time

    User Account Control window keeps popping up every timeI use sudo from the cmd line. This isn't good as I'M AT A CMD LINE! It doesn't even get focus, I have to go and find it (shift-alt-tab usually works). Is there any fix for this? I'm using Windows 7 Home Premium. Thanks, |\/|x.

    2012-04-01 11:11:23 PDT by maxxon

  • Followup: RE: Command not allowed

    Hmmm, seems like I posted in the wrong forum. Sorry. |\/|x.

    2012-04-01 10:53:59 PDT by maxxon

  • Command not allowed

    This doesn't seem to work on Windows 7 Home Premium. I get the message "Command not allowed" no matter how I invoke it (GUI or cmd line). Does it work on any other Windows 7 version? |\/|x.

    2012-04-01 10:51:08 PDT by maxxon

  • SudoWin linking into AllUsers/Guest acct.

    I recently ran into a problem wherein my profile would never "stick"...that is to say, every time I'd log out the back in again, Windows XP (SP3) will regenerate my profile directory, providing suffixes as necessary (.DOMAIN, .DOMAIN.000, DOMAIN.001, etc.). The "powers that be" said it was the fault of SudoWin messing with the local guest account somehow, such that every...

    2011-12-12 21:42:22 PST by rchandra

  • Followup: RE: Unable to run commands on shared drive

    Same thing applies to RunAs. Either one is lauched from a service which interacts with the desktop. Essentially, it's like logging in again, but without anything GPOs (e.g. login scripts) or shells (explorer.exe will for example launch everything in all users and your own startup folders, the Run registry key, the RunOnce registry key, etc.) do. So none of that setup occurs, and would have to...

    2011-12-12 21:31:04 PST by rchandra

  • Followup: RE: Launch .msc files

    This is because shells (either explorer.exe or cmd.exe) run mmc for you. Sudo cmd /c services.msc might have a similar effect. Unfortunately, Windows does some things like you've found out which make it somewhat more difficult to use SudoWin. It's all in the file associations, such as you can see with ftype and assoc in the cmd shell. SudoWin could be designed always to wrap its command...

    2011-12-12 21:22:12 PST by rchandra

  • Followup: RE: Configuration for individual Services

    ACL the service itself, not the control of all services. See another SourceForge project, SetACL. I routinely do things something like: setacl -ot srv -on SomeService -actn ace -ace "n:joe@domain;p:start_stop" It's basically adding an ACE (access control entry) to the ACL (access control list) for a service. So this gives the user joe@domain the stop_start permission, but...

    2011-12-12 21:15:06 PST by rchandra

  • Followup: RE: Is this working correctly??

    I'll second the suggestion of trying to run cmd.exe, then run console app, or alternately, cmd with the /k switch. Unfortunately, this is sort of "giving away the store" if your policy is not to allow arbitrary apps. Allowing cmd.exe is a pretty major hole in that sort of policy model.

    2011-12-12 21:08:14 PST by rchandra

  • Followup: RE: Configuration for 1300 Users

    Hey, I don't have the resources to try this out, but...I don't think the server cares which group ID holds the sudoers. It could for example be a domain group. I'm not sure. One of the attributes in the sudoers.xml file is the name of the group which you wish to allow. Try changing it to SomeDomainGroup@some.full.domain or SOMEFULLDOMAIN\SomeDomainGroup, and restart the service...see if that...

    2011-12-12 21:02:04 PST by rchandra

  • Followup: RE: Missing Documentation found!

    This is a great find. The SANS Institute also hosts a PDF with some documentation on SudoWin. http://www.sans.org/reading_room/whitepapers/bestprac/sudo-windows-sudowin_1726.

    2011-12-12 20:53:35 PST by rchandra

Our Numbers