Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 6 down vote favorite
2

I'm trying to run xcopy commands in a batch file as an administrator. Is this the correct command and how can I pass the password into it?

runas /noprofile /user:Domain Name\user account
share|improve this question

4 Answers

up vote 4 down vote

To automatically authenticate add the /savecred flag. You'll have to enter the password the on the first run. It will be saved afterwards.

Realize that runas will then be able to use the saved credentials to execute any given program, so do think about how that could be a security issue before going this route.

Your usage is correct though, just add the program path at the end.

runas /noprofile /user:joe@example.com /savecred script.bat
or
runas /noprofile /user:joe-pc\joe /savecred script.bat

To delete a saved credential search for the Credential Manager in Control Panel.

share|improve this answer
up vote 3 down vote

The runas command should prompt you for the credentials when you run the batch file to execute the specified command. As long as you run it in cmd.exe. This is due to the need for the standard input neccessary to prompt for the password. You cannot just double click it. Storing a password in plaintext in a batch file is a bad idea because it's insecure. That's why it prompts at runtime.

You may right click on the executable and click Run as Administrator, without the runas command. This is probably the solution you are looking for.

If you wanted to run the task as a scheduled task, you can set it to run it as different user there.

share|improve this answer
i understand storing the password in the plain txt would be unsecure but is there any way for it to authenticate automatically ? – joe Dec 19 '12 at 0:07
The best way is to right click on the executable & Run as Administrator, or set the task to run as certain user as scheduled task. Any other option that authenticates as an admin would open some major security risks. It looks as though windows doesn't have this capability. If you'd like more information on the subject, see setuid for windows. setuid is used in unix environments to allow a non-admin run a program as root(admin). A program that uses setuid must be very carefully coded to not create vulnerabilities. – BrenanK Dec 19 '12 at 2:09
Just to be clear setuid can be configured to assume privileges of other users as well as root on a Unix system. – BrenanK Dec 19 '12 at 2:22
up vote 1 down vote

You could use RunAs when you call the batchfile (right click on the batchfile and click runas) to have the batch run as administrator. I suspect that runas will not work inside the batch. I'd recommend NOT putting the password in the batch file, even if it did work, batch files are plain text, so you might as well put the password on a post-it note on the monitor.

share|improve this answer
up vote 0 down vote

This website discusses creating an autoit script that obfuscates the the contents of the file towards the bottom of the file.

http://www.neowin.net/forum/topic/922704-secure-use-of-passwords-in-batch-files/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.