armadaender Posted August 1, 2006 Share Posted August 1, 2006 Stumbled across this today on digg and I was curious as to your guys' thoughts on it. http://www.projectstreamer.com/users/r0t0r...p_priv_esc.html *It's a short vid. Quote Link to comment Share on other sites More sharing options...
debianuser Posted August 1, 2006 Share Posted August 1, 2006 Stumbled across this today on digg and I was curious as to your guys' thoughts on it.http://www.projectstreamer.com/users/r0t0r...p_priv_esc.html *It's a short vid. did not try it to see if it works... but if it does.. then that's scary... a solution would be to disable dos prompt for all users beside the Admin :roll: Quote Link to comment Share on other sites More sharing options...
cooper Posted August 1, 2006 Share Posted August 1, 2006 Wouldn't the better solution be to just not run the scheduler? Or perhaps limit the users who can set up a scheduled task? Quote Link to comment Share on other sites More sharing options...
debianuser Posted August 1, 2006 Share Posted August 1, 2006 Wouldn't the better solution be to just not run the scheduler?Or perhaps limit the users who can set up a scheduled task? It does not work with a limited user.. you need to be Admin to execute it! so no worries - Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 1, 2006 Share Posted August 1, 2006 did not try it to see if it works... but if it does.. then that's scary...a solution would be to disable dos prompt for all users beside the Admin :roll: Actualy, that wouldn't solve the problem. When cmd is launched via task sceduler it is launched as system. System is the non-user interactive root (where as the administrator acount is the user interactive root). Even if command prompt is blocked and stops a user having to manualy type in the at command, the user can just as easily write it into a batch script. Failing that, write a program that gets the current time, adds a minuet to it, then executes the at command for the user. Quote Link to comment Share on other sites More sharing options...
debianuser Posted August 1, 2006 Share Posted August 1, 2006 did not try it to see if it works... but if it does.. then that's scary...a solution would be to disable dos prompt for all users beside the Admin :roll: Actualy, that wouldn't solve the problem. When cmd is launched via task sceduler it is launched as system. System is the non-user interactive root (where as the administrator acount is the user interactive root). Even if command prompt is blocked and stops a user having to manualy type in the at command, the user can just as easily write it into a batch script. Failing that, write a program that gets the current time, adds a minuet to it, then executes the at command for the user. ok i see... well anyway... you gotta be Admin to execute it, or am I mistaken? Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 1, 2006 Share Posted August 1, 2006 I just tested it on windows 2000 and it doesn't seem to work. Limited users are not allowed to create scedualed tasks. Quote Link to comment Share on other sites More sharing options...
roo-boy Posted August 1, 2006 Share Posted August 1, 2006 yeah same issue, i could not even set the scheduler thru dos prompt. whats the date of this video? it seems like something before service pack 2 or even before SP1. Quote Link to comment Share on other sites More sharing options...
kickarse Posted August 1, 2006 Share Posted August 1, 2006 It's pre sp2... we already have a thread about it... Quote Link to comment Share on other sites More sharing options...
Freakish Posted August 2, 2006 Share Posted August 2, 2006 you could just create a administrator account and then delete the other adminstrator. Quote Link to comment Share on other sites More sharing options...
Guest zacharygriggs Posted August 2, 2006 Share Posted August 2, 2006 taken not more than 5 minutes ago it works right click and view image fore a blow up Quote Link to comment Share on other sites More sharing options...
debianuser Posted August 2, 2006 Share Posted August 2, 2006 taken not more than 5 minutes ago it works right click and view image fore a blow up yes Duh - it works but no from limited user! - end of the thread - Quote Link to comment Share on other sites More sharing options...
Guest zacharygriggs Posted August 2, 2006 Share Posted August 2, 2006 i had problems the creation of accounts is and i quote "null" so the system cannot create accounts, brings slight peace of mind after reading 1984 and i'll try it from limited account Quote Link to comment Share on other sites More sharing options...
Guest zacharygriggs Posted August 2, 2006 Share Posted August 2, 2006 "Access Denied" but i must try things with the account Quote Link to comment Share on other sites More sharing options...
debianuser Posted August 2, 2006 Share Posted August 2, 2006 "Access Denied"but i must try things with the account dude... no offense but do you read the other posts before writting? :? Quote Link to comment Share on other sites More sharing options...
Guest zacharygriggs Posted August 2, 2006 Share Posted August 2, 2006 not all that well appearently Quote Link to comment Share on other sites More sharing options...
Freakish Posted August 2, 2006 Share Posted August 2, 2006 If you have access to the command prompt then you can just get administrated status in under 10 seconds. I'm not going to post how for two reasons 1. Most of the people on here probably already know how to do it. 2. For the people in school that don't know how to do it, I can't trust them to use it with in reason. Quote Link to comment Share on other sites More sharing options...
melodic Posted August 2, 2006 Share Posted August 2, 2006 If you have access to the command prompt then you can just get administrated status in under 10 seconds.I'm not going to post how for two reasons 1. Most of the people on here probably already know how to do it. 2. For the people in school that don't know how to do it, I can't trust them to use it with in reason. post then. i dont know and ive left school... Quote Link to comment Share on other sites More sharing options...
cooper Posted August 2, 2006 Share Posted August 2, 2006 And thankfully you're the last person on this forum that was still in school. Yup, all clear. Go for it. :roll: Quote Link to comment Share on other sites More sharing options...
melodic Posted August 2, 2006 Share Posted August 2, 2006 phew was close there eh cooper :P yeah i left months ago so its good to tell:P Quote Link to comment Share on other sites More sharing options...
kickarse Posted August 2, 2006 Share Posted August 2, 2006 No school age kids? whoa... that's a first... Quote Link to comment Share on other sites More sharing options...
Freakish Posted August 2, 2006 Share Posted August 2, 2006 I'm still in high school. I'm going into 11th grade after summer break. I just hope I got into the Cisco class. Quote Link to comment Share on other sites More sharing options...
Guest zacharygriggs Posted August 3, 2006 Share Posted August 3, 2006 I'm still in high school. I'm going into 11th grade after summer break. I just hope I got into the Cisco class. shut up, now he wont tell us anyway most schools disable command prompt Quote Link to comment Share on other sites More sharing options...
Freakish Posted August 3, 2006 Share Posted August 3, 2006 I can get around that. Quote Link to comment Share on other sites More sharing options...
Guest zacharygriggs Posted August 3, 2006 Share Posted August 3, 2006 seriously freakish how do you gain admin powers Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.