Runas another user to share

altima 21

Hi All, can someone help me understand runas permissions in windows 10? If a standard user has read access to a file share and log on to windows with that account, can they runas a different user who has admin permissions to that share and be able to browse the shares as admin on their computers logged in as the standard user? If so I'm not able to, I just keep getting the windows prompt for credentials after I've confirmed its correct.

3 answers

Leon Laude 85,786 Reputation points

2020-08-05T11:26:07.803+00:00

Hi,

Yes you can, you can for example map the share as a network drive, when mapping a network drive you will be prompted to give credentials of a user who has permissions to that share.

Map a network drive
https://support.microsoft.com/en-us/help/4026635/windows-map-a-network-drive

(If the reply was helpful please don't forget to accept as answer, thank you)

Best regards,
Leon
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
altima 21 Reputation points

2020-08-05T12:33:07.647+00:00

OK thanks that's what I thought, however what if the user tried to access the share logged in as their "standard" account and then tried to use runas with their privileged account? This isnt working for me and have seen on other forums that the server denies a connection if they're already connected with a different account? f
Please sign in to rate this answer.
Leon Laude 85,786 Reputation points

2020-08-05T12:39:53.71+00:00

You can access a share with another account even while logged on to the computer with a standard account, for example by opening a Command Prompt / PowerShell with the Run As Different User.

altima 21 Reputation points

2020-08-05T12:59:58.467+00:00

Ok thats good news, but how would I troubleshoot if its not working? The standard user account has read only access to those shares and when removed from read only access that user is then able to use "runas" with his privileged account.

TimCerling(ret) 1,156 Reputation points

2020-08-05T13:10:27.163+00:00

That makes perfect sense. If you use runas, that means you are running under the permissions of the runas account, not the original account. So if the original account does not have access rights, but that user has access to a runas account, that user can access with the runas account.

Maybe if you explain what you are trying to accomplish we could be more helpful.

altima 21 Reputation points

2020-08-05T13:26:12.24+00:00

Ok I'll try to explain it without being confusing. User has a standard account and had read only access to a file share and can browse the files with just read only access from his laptop on the network. User also has a privileged account and at times needs modify access to those shares and will be able to using that privileged account, however he is not able to "runas" explorer or mapping a drive to the share using that privileged account. I have found removing read only access to his standard user account allows him to use "runas" with his privileged account for some reason?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Anonymous

2020-08-05T13:39:19.683+00:00

Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. So as a work-around do a net use * /delete in between connections.

--please don't forget to Accept as answer if the reply is helpful--
Please sign in to rate this answer.
altima 21 Reputation points

2020-08-05T13:49:26.083+00:00

Thank you, can you show me where this is documented?

altima 21 Reputation points

2020-08-05T13:51:15.113+00:00

Also, it is not the same user because when using "runas" its a different account.

Anonymous

2020-08-05T13:54:37.657+00:00

Here you go.
https://support.microsoft.com/en-us/help/938120/error-message-when-you-use-user-credentials-to-connect-to-a-network-sh

--please don't forget to Accept as answer if the reply is helpful--

altima 21 Reputation points

2020-08-05T13:57:39.573+00:00

Yeah I saw that but thats for windows XP & 2003. Using runas would connect as a different user so why wouldnt that be allowed? Can you change the connections on the server?

Anonymous

2020-08-05T14:00:36.097+00:00

Article applies to more OS's that are also listed. Regardless core functionality of windows has not changed. There are a couple of work-arounds in the article or just simply do a net use * /delete in between connections.

--please don't forget to Accept as answer if the reply is helpful--
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Runas another user to share

3 answers

Your answer