RSAT, Vista and ShellRunas

re: RSAT, Vista and ShellRunas

Chris Knight — Wed, 02 Apr 2008 09:29:33 GMT

If you're using ShellRunAs, then you can run 'shellrunas.exe /regnetonly' as well, then running the RSAT components using 'Run as different user (netonly)...'.

This means that the component runs locally with normal privileges and the RPC calls made by the component then run with elevated privileges.

re: RSAT, Vista and ShellRunas

Chris Knight — Wed, 02 Apr 2008 06:37:38 GMT

The comment Jesper makes about a compromised workstation is probably the best reason why the Vista/Win2008 GPMC should have been backported to Win2003.

Difficult yes, impossible no.

The alternative is to have a Vista Business VM installed on a/the server locked down such that it can only be used for Vista/Win2008 Group Policy management.

The VM is probably the most effective solution for shops needing to perform remote maintenance/management of Group Policy without needing to remote a local Vista machine.

re: RSAT, Vista and ShellRunas

John — Fri, 28 Mar 2008 19:56:46 GMT

How'd you get so smart? I downloaded and installed the RSAT update but I missed the blurb on the download page about going to add/remove components to finish the installation. There I am, trying to figure out where my shortcuts are. Duh!

Thank you very much for your willingness to RTFM and share the knowledge.