RunAs - Revision history

Ledhed at 20:26, 22 March 2015

2015-03-22T20:26:46Z

Ledhed at 20:26, 22 March 2015

2015-03-22T20:26:25Z

Ledhed: Created page with "Every Windows admin is familiar withe the RunAs command. Recently I came across a new feature called /savecred == SaveCred == RunAs.exe /SaveCred /User:Username@Domain.tld "..."

2015-03-22T20:25:23Z

Created page with "Every Windows admin is familiar withe the RunAs command. Recently I came across a new feature called /savecred == SaveCred == RunAs.exe /SaveCred /User:Username@Domain.tld "..."

New page

Every Windows admin is familiar withe the RunAs command.
Recently I came across a new feature called /savecred

== SaveCred ==
RunAs.exe /SaveCred /User:Username@Domain.tld "command goes here"

The above command will run a command with the specified credentials (thats what RunAs does), but the /SaveCred option securely saves the password in the Windows Credential Manager. The next time you run the command the password is automatically entered for you thus saving you the hassle of entering it every time. Where I find this most useful is with shortcuts. I have created shortcuts that use the RunAs command before, but with /SaveCred the shortcut operates transparently because there is not dos box prompting for a password.

== Security Risks ==
Obviously this has some security risks associated with it.
# If you walk away from your desk and leave the workstation unlocked then a user could run certain commands with those credentials, so don't use /SaveCred with Administrative accounts.
# I'm not sure how easy it is to crack the Windows Credential Manager, but the credentials are stored on disk. So assuming a hacker were to get hold of it, they could attempt a brute force attack offline.
# I'm sure there are more.

[[Category:Windows]]

← Older revision		Revision as of 20:26, 22 March 2015
Line 5:		Line 5:
	RunAs.exe /SaveCred /User:Username@Domain.tld "command goes here"		RunAs.exe /SaveCred /User:Username@Domain.tld "command goes here"

−	The above command will run a command with the specified credentials (thats what RunAs does), but the /SaveCred option securely saves the password in the Windows Credential Manager. The next time you run the command the password is automatically entered for you thus saving you the hassle of entering it every time. Where I find this most useful is with shortcuts. I have created shortcuts that use the RunAs command before, but with /SaveCred the shortcut operates transparently because there is ~~not dos~~ box prompting for a password.	+	The above command will run a command with the specified credentials (thats what RunAs does), but the /SaveCred option securely saves the password in the Windows Credential Manager. The next time you run the command the password is automatically entered for you thus saving you the hassle of entering it every time. Where I find this most useful is with shortcuts. I have created shortcuts that use the RunAs command before, but with /SaveCred the shortcut operates transparently because there is no DOS box prompting for a password.

@@ Line 13: / Line 13: @@
 # I'm not sure how easy it is to crack the Windows Credential Manager, but the credentials are stored on disk. So assuming a hacker were to get hold of it, they could attempt a brute force attack offline.
 # I'm sure there are more.
 [[Category:Windows]]