I'd like to use 'psexec' over a lan to run a command as another user that is logged on the system at the same time.
In other words: I want to use 'psexec' with the built-in Administrator account credential to run a program in Bob's desktop. This program needs to believe it was launched by Bob using his credentials. Since I'm using the Administrator account I'd like to bypass the need of Bob's password to do this (with 'runas', maybe).
I've already got access to the system, since I own the Administrator account.
I don't feel like having an agent/service/exe running at all time in the background.
This is an home setup.
I was thinking of something like this: http://reboot.pro/files/file/237-runassystem-and-runfromtoken/ but applied to any other user.
I want to be able to launch a program such as a game or a mail client that saves files in per-user paths.** So running as Administrator would not be effective since the program would load Administrator's data profile and not Bob's (who is logged on).
My ultimate goal is to be able to launch the 'whoami' command and have it say that I'm the logged user.
I've been able to get a 'cmd.exe' as SYSTEM, and then get one instance as my account(password protected) with it using RunFromToken. I'm going to test this further.