Disable Run as different user using GPO
What GPO setting(s) will disable/Remove "Run as different user" when you hold down the shift key?
July 20th, 2010 6:44pm
What GPO setting(s) will disable/Remove "Run as different user" when you hold down the shift key?
You can use this Group Policy setting so they do not invoke it by moving the the file they need to access on to the network to invoke runas.
User Configuration \ Windows Components \ Windows Explorer \ Do Not Request Alternate Credentials
Registry Entry to Add to disable GUI RunAs - Distribute with login script using a batch file to import registries.
Merge or import norunas.reg to Registry silently:
regedit -s norunas.reg
NORUNAS.BAT
@ECHO OFF
title script > nul
net use X: \\server\share > nul
X: > nul
regedit -s X:\norunas.reg > nul
net use x: /delete > nul
Exit
NORUNAS.REG
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"HideRunAsVerb"=dword:00000001
Unfortunately batch files do not support the UNC variables. The nul's keep the user from seeing the activity, and title > nul prevents them from seeing the name of the batch executing so they can't search for it.
Steve Kline - MCITP
This posting is "as is" without warranties and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2010 11:48pm
I have two computers, one in an OU that doesn't get GP and another that does. The one getting GP won't show "Run as Different User" when I Shift+Right-Click. The other will. This leads me to believe there is a group policy change that makes this happen.
Unfortunately I went through all the settings in the RSoP applied to the machines and there is nothing that clearly says it disables/enables that option nor is there a registry setting that goes in with HideRunAsVerb so I'm not sure how this is getting removed,
whether it's a User or Computer configuration. This is a very popular question out there and I haven't found an answer yet. I would greatly appreciate your help. Thanks.
August 31st, 2011 12:35pm