Active Directory Problems

[scarboni]

Hello there,

I just came across a problem while i was using a simple code contaning run as when im running Active directory. I cant change password on users if i write the following code. If i do a normal run as on the file i can change the password on a ad user but not when im running this code snippet.

RunAs($Username, $Domain, $Password, 0, @ComSpec & " /c " & 'dsa.msc', "", @SW_HIDE)

Help please

Edited September 14, 2011 by scarboni

[Akarillon]

All managementsoftware in Windows are "immune" to virtual keystrokes etc..

Computer Management

Local Group Policy Editor

Registry Editor

etc etc

[water]

You could use my Active Directory UDF to do what you need (for download please see my signature).

[scarboni]

Am I able to run the AD through the CMD by just adding the original run as command and being able to reset passwords?

Runas /user:Domain\Username "dsa.msc"

[scarboni]

You could use my Active Directory UDF to do what you need (for download please see my signature).

I read through your UDF a bit, is it able to connect to the Active Directory and search, reset passwords and manage accounts? Im working at a company as a IT dekstop engineer and i created a program named AdminIT which runs AD as the engineers admin account it works to search through the AD but i cannot reset passwords and i suppose i cant create accounts with it either.

Edited September 14, 2011 by scarboni

[water]

Connect: _AD_Open - you can specify the credentials to use

Search: Function _AD_GetObjectsInOU

Reset password: Function _AD_SetPassword

Manage accounts: Depends on what you want to do

Edited September 14, 2011 by water

[scarboni]

I would like to get access to this window

If im using your UDF i will have to build my own GUI for it right?

[water]

Yes. If you create your own GUI you can limit the user to the necessary functions.

[scarboni]

The idea is to get full access to the original AD program, I sure could build my own AD GUI and create most of the functions with your UDF but it would be kinda redundant to invent the wheel once again when all i just want to do is access the program But if it's not possible to use all the functions inside the original AD i probably will have to create my own :S

Or I could make a ugly solution where I open the Systemdir and locate dsa.msc and send shift + right mouse button and select run as, check the run as another user and enter the needed information.

[scarboni]

This code works but its a ugly solution :S

$domain = "domain"
$username = "user"
$password = "password"
send("#r")
WinWaitActive("Run")
ControlSetText("Run", "","[CLASSNN:Edit1]","c:\windows\system32")
send("{ENTER}")
ControlFocus("system32", "", "SysListView321")
sleep(500)
Send("dsa.",1)
Send("{APPSKEY}")
Sleep(100)
send("u")
winwaitactive("Run as")
ControlCommand("", "", "Button3", "Check")
Sleep(500)
ControlSetText("Run as", "","[CLASSNN:Edit1]",""&$domain&"\"&$username)
ControlSetText("Run as", "","[CLASSNN:Edit2]",""&$password)
send("{ENTER}")

Also found out another solution which worked better.

Send("#r")
  ControlSetText("Run", "", "[CLASSNN:Edit1]", "runas /user:"&$DomainCheck&"\"&$UNCheck&' "mmc %windir%\system32\dsa.msc"')
  Send("{ENTER}")
  WinWaitActive(@WindowsDir &"\system32")
  Send($PWCheck ,1)
  Send("{ENTER}")

Edited September 15, 2011 by scarboni