29
Feb
The script mentioned in my last article works great in SOHO environment where we don’t have many shared network resources.
But it won’t work in a corporate environment where access to any network resources (file-share, printer, portal, etc) is controlled by “Network ID” (typically from Windows or Novell Netware network). This happens because “Local Administrator” are usually not part of network and they are treated as anonymous user.
This new version of “MyAdmin” AHK (AutoHotkey) script overcomes this problem and works great in corporate networks as well.
span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; Some default values span style="color: #0080FF; font-style: italic; font-weight: bold;"> LocalAdminGroup ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> Administrators ="color: #0080FF; font-style: italic; font-weight: bold;">; Settings for local administrator span style="color: #0080FF; font-style: italic; font-weight: bold;"> LocalAdminUser ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> admin LocalAdminPass ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> secret ="color: #0080FF; font-style: italic; font-weight: bold;">; Settings for normal user span style="color: #0080FF; font-style: italic; font-weight: bold;"> WindowsDomain ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> domain NormalUser ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> user NormalPass ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> password ="color: #0080FF; font-style: italic; font-weight: bold;">; Target program span style="color: #0080FF; font-style: italic; font-weight: bold;"> RunTarget ="color: #0080FF; font-style: italic; font-weight: bold;">=="color: #0080FF; font-style: italic; font-weight: bold;"> C:="color: #0080FF; font-style: italic; font-weight: bold;">\Program Files\ExplorerXP\ExplorerXP.exe IfExist,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%RunTarget%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">{="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; Add normal user to local admin group span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>RunAs,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%LocalAdminUser%="color: #0080FF; font-style: italic; font-weight: bold;">,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%LocalAdminPass%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>RunWait,="color: #0080FF; font-style: italic; font-weight: bold;"> NET LOCALGROUP ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%LocalAdminGroup%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%WindowsDomain%="color: #0080FF; font-style: italic; font-weight: bold;">\="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%NormalUser%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/ADD,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">,="color: #0080FF; font-style: italic; font-weight: bold;"> Hide ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>RunAs ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; Reset to normal behavior. span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; Execute target with elevated administrator permissions span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>RunAs,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%NormalUser%="color: #0080FF; font-style: italic; font-weight: bold;">,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%NormalPass%="color: #0080FF; font-style: italic; font-weight: bold;">,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%WindowsDomain%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>Run,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%RunTarget%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; Wait for 200 ms span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>Sleep,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #AC00A9; font-style: italic; font-weight: bold;"="color: #0080FF; font-style: italic; font-weight: bold;">>200 ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; remove normal user from local admin group span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>RunWait,="color: #0080FF; font-style: italic; font-weight: bold;"> NET LOCALGROUP ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%LocalAdminGroup%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%WindowsDomain%="color: #0080FF; font-style: italic; font-weight: bold;">\="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%NormalUser%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/DELETE,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">,="color: #0080FF; font-style: italic; font-weight: bold;"> Hide ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>RunAs ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">; Reset to normal behavior. span style="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">}="color: #0080FF; font-style: italic; font-weight: bold;"> IfNotExist,="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%RunTarget%="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">{="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">/3/="color: #0080FF; font-style: italic; font-weight: bold;">>MsgBox,="color: #0080FF; font-style: italic; font-weight: bold;"> Target ="color: #0080FF; font-style: italic; font-weight: bold;">(i.e.="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">="color: #0080FF; font-style: italic; font-weight: bold;">>%RunTarget%="color: #0080FF; font-style: italic; font-weight: bold;">)="color: #0080FF; font-style: italic; font-weight: bold;"> does ="color: #0080FF; font-style: italic; font-weight: bold;">/1/="color: #0080FF; font-style: italic; font-weight: bold;">>not exist.="color: #0080FF; font-style: italic; font-weight: bold;"> ="color: #0080FF; font-style: italic; font-weight: bold;">}="color: #0080FF; font-style: italic; font-weight: bold;">
Please follow Aaron’s advise on Default Owner fix. This is required for extra security on file system permissions.
Cheers,
0