Run Script under different user - always


is there way make users runs powershell script , when execute it runs under different credentials without prompting username/password?  the scenario this, im writing script our helpdesk pull information ad  that require domain admin privliges ascertain.  of course not want our helpdesk have username/password run script.  is there way store info in encrypted file can read each time script run?    

the ideal way use powershell remoting. can create constrained endpoint can have access control (only allowing desk staff / etc connect), and runs commands in remoting session service account's credentials (which never have exposed client computer in form), , exposes commands , functionality need desk have.

by contrast, if try encrypt set of credentials , have desk staff run script uses credentials, have absolutely no way of preventing staff members obtaining plain-text credentials.  if user able run script, they're able read encrypted data.  remoting , constrained endpoints, not case.

jeffrey snover's been developing , presenting new powershell toolkit called jea (just enough admin), takes concept , turns 11.



Windows Server  >  Windows PowerShell



Comments

Popular posts from this blog

CRL Revocation always failed

Failed to query the results of bpa xpath

0x300000d errors in Microsoft Remote Desktop client