Windows sysinternals

Chapter 8 Security Utilities 279
a smartcard PIN on systems configured for smartcard logon. You can also use ShellRunAs
similarly to Runas.exe but with a more convenient graphical interface. None of ShellRunAs’
features require administrative rights, not even the registering of context menu entries.
ShellRunAs can be used on Windows XP or newer.
FIGURE 8-4 ShellRunAs prompting for user credentials.
ShellRunAs also supports the Runas.exe netonly feature, which was never previously available
through a Windows GUI. With the netonly option, the target program continues to use the
launching user’s security context for local access, but it uses the supplied alternate credentials
for remote access. (See Figure 8-5.) Note that a console window might flash briefly when
ShellRunAs starts a program with netonly.
FIGURE 8-5 ”Run As Different User” options added to the Explorer context menu.
The valid command-line syntax options for ShellRunAs are listed next, followed by
descriptions of the command-line switches:
ShellRunAs /reg [/quiet]
ShellRunAs /regnetonly [/quiet]
ShellRunAs /unreg [/quiet]
■ /reg Registers Run As Different User as an Explorer context menu option for the
current user. (See Figure 8-5.)
■ /regnetonly Registers Run As Different User (Netonly) as an Explorer context menu
option for the current user.
■ /unreg Unregisters any registered ShellRunAs context menu options for the
current user.
■ /quiet Does not show a result dialog box for registration or unregistration.
www.it-ebooks.info