Common scenario: you log on with your Windows domain account, which you have removed from the Administrators group (as well as from Power Users, Backup Operators, etc.). When you need to perform tasks that require elevated privileges, you use RunAs to start a program with the local Administrator account. You quickly realize two things:
- The program running as local Administrator cannot access network resources, since your local account is recognized only on your own computer; and
- Any per-user settings apply to the local Administrator’s profile, not to the profile you normally work with.
Read more and get this little script at
Aaron Margosis' weblog.
