Thanks Scott,
I always wondered if there was an NT version of sudo.
Now I need to find a way to automate the entry of
the password prompted for by runas.
I think I'm going to have to find a way to make my
ASP scripts run interactively. I wonder if there is an
NT version of "expect" out there. Any ideas?
Thanks again,
Scott Jones
REANet
----- Original Message -----
From: Scott Phelps <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 27, 2000 2:14 PM
Subject: RE: [IMail Forum] Using the adduser.exe utility via a web server
> 2000 handles registry permissions differently than NT4 did, it's possible
> that current permissions (prob IUSR) are being used straight through to
the
> registry edit. If that is the case I would recommend using the runas
utility
> and foregoing changing registry permissions. Just make sure your ASPs are
> written well! I've had to use this trick several times on ASPs CGIs that
> were accessing things normally not touched by the IUSR acct.
>
> (by the way I think runas (name?) is part of the resource kit. It's kinda
> like su on a ([^\s])+nix box)
>
> _______________________________
> | |
> | Scott Phelps |
> | NT Systems Administrator |
> | WebKorner Internet Services |
> | [EMAIL PROTECTED] |
> | www.webkorner.com |
> | MCDTP (Microsoft Certified |
> | duct tape professional) |
> |_______________________________|
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Jones
> Sent: Monday, November 27, 2000 3:46 PM
> To: [EMAIL PROTECTED]
> Subject: [IMail Forum] Using the adduser.exe utility via a web server
>
>
> I'm using IMail 5.06 on a Windows 2000 server, running
> IIS 5.0 Web Server.
>
> I've designed an ASP-driven set of scripts that lets me use
> the adduser.exe utility to add or delete imail users from
> the web. The scripts worked fine under Windows NT, but
> after we migrated to Windows 2000, I discovered that I
> couldn't delete users that had not been added via the web
> page scripts.
>
> For example, if I use the script to add a user called "fred"
> to a host called "gj.net" the following command is called
> from the web page:
>
> \imail\adduser -h gj.net -u fred -n Fred -p dummy
>
> This works everytime. If I then want to delete "fred", the
> web page calls this:
>
> \imail\adduser -kill -h gj.net -u fred
>
> Again, this works as long as the user was added via the web
> page.
>
> However, if the user "fred" were added via the imail
> administrator, rather than the web app, I can't delete him
> via the web app.
>
> I suspect this is some sort of permissions problem, but I
> have tried switching permissions on the user directory, and
> have even made the IIS process account a member of the
> Administrators group. This hasn't worked. The problem
> seems to be that the registry entry can't be deleted unless
> it was originally created via the same (web) process.
>
> Can you suggest any sort of fix that will allow me to use
> adduser.exe to delete users via the web when the users were
> not created via the web?
>
> Thank You,
> Scott Jones
> REANet
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
