Thanks ever so much for changing the behavior of the "Run As" context menu item to better fit your broken User Access Control feature which broke certain vertical apps that run from GPO-mapped network drives thus forcing me to disable UAC. Very clever.
But I can handle it -- I'll just use the runas command from the shell!
Oh, I see you also "fixed" Explorer so that I can't use runas to launch it as a new process. Hm. No problem, let me try using IE to browse the file system. Dag, yo. I see you "fixed" IE in version 7 to launch an Explorer window to browse the file system.
Ok, whew, there's a registry value for Explorer called SeparateProcess which has to be set for the user that I want to run the Explorer process as. Alright, let me add that to my script and verify that it's set...ok...now run it...... .... .... .... .... .... you bastard.
Haha. Ok ok. Good one, seriously. What really gets me is that you had me all excited about the new security features in Vista, but I already had to disable UAC and now I'm looking at running as an administrator just to do my job? Yeah, it's cool that you fixed fast user switching so that we can use it on our domain machines, but who wants to completely switch to an administrator environment just to find a file for someone? Lame.
But you haven't won. I did find a solution.
To anyone who is trying to launch Explorer on Vista from an elevated account, just stop trying. It's a waste of time. Here's what you do:Instead of trying to get Explorer to work, grab a copy of
FreeCommander. FreeCommander is a file manager for Windows and, as its name implies, is free. You can launch FreeCommander with runas successfully, and you'll be able to browse your local file system or network as an administrator or domain administrator.
To make things easier, you can launch FreeCommander with runas from a simple shell script (batch file). Despite what you might think, you do not have to put your password into the runas command to make it work. Simply leave the password out and when you run the batch a command shell will appear asking for your password and once you've entered it, FreeCommander will fire up. All nice and safey safe.
To make things even easier, it's Sysinternals to the rescue once again with
ShellRunas v1.01. Run `shellrunas /reg` to register it as a context menu entry, and you'll see a "Run as a different user" item on the menu when you right-click an executable. Basically, this restores in Vista the runas functionality we had in XP. You'll still see the worthless "Run as administrator" entry in the menu, but the world can't be perfect.
(Thank Blod for Mark Russinovich and Sysinternals. Note that Microsoft bought Sysinternals so you'd better grab everything you can now just to be safe.)
Wondering why I chose FreeCommander as my file manager? No? Well read on. Of all the free file managers I found in a quick search, FreeCommander is the only one that didn't puke when run under a secondary login. All of the rest either didn't work well on Vista period, or died horrible deaths when trying to browse the network. None of the programs will recognize Vista's awesome new way of handling mapped network drives, but at least FreeCommander keeps chugging along instead of freezing up and can do UNC just fine.
Here is a list of the programs that I tried on 04/10/08. None of these worked well enough:
Ac Browser Plus (ACB) (trouble on the network when started with runas)
ExplorerXP (blank context menus on Vista)
FileAnt (great program, but freezes on network when started with runas)
UltraExplorer (great looking program, but freezes too often)
muCommander (Java, very bad network support on Vista)
Off all these, only muCommander is GPL. Drag. FreeCommander wasn't my favorite of the five I tried, but it's the only one that doesn't puke when I run it this way.
Anyhow, I added a link to my batch file on my
RocketDock (a MUST HAVE application for Windows) and everything is once again golden...or sort of brown anyhow....well, there's a little green in there...
*note: I can already hear the question in my own mind: well this solution works great from my own machine, but what about from my users' machines? Thankfully, my users all run XP with un"fixed" runas, explorer, and yeah, I've stuck them with IE6. When the Vista changes happens against my will, then fast user switching and runas from the shell will get most jobs done just fine.*