{"id":160,"date":"2012-09-28T22:51:58","date_gmt":"2012-09-29T03:51:58","guid":{"rendered":"https:\/\/danvanfleet.com\/index.php\/trippy-little-registry-solution\/"},"modified":"2013-02-13T21:36:12","modified_gmt":"2013-02-14T02:36:12","slug":"trippy-little-registry-solution","status":"publish","type":"post","link":"https:\/\/danvanfleet.com\/index.php\/trippy-little-registry-solution\/","title":{"rendered":"Trippy little registry solution"},"content":{"rendered":"<p>I ran across this today and wanted to be sure to save it.&nbsp; I\u2019m not sure where I\u2019ll use it yet, it needs further investigation.<\/p>\n<p>One of the interesting road blocks that Microsoft built into Windows Operating systems starting with Vista, so 7, 2008 etc. are included, is when a command window or other program is run as administrator, they don\u2019t receive the user\u2019s mapped drives, or other shared network connections.<\/p>\n<p><!--more--><\/p>\n<p>Microsoft built a fix into the OS, but in their <a href=\"http:\/\/support.microsoft.com\/kb\/937624\">KB 937624<\/a> they state \u201c<strong>Important<\/strong> This workaround may make your system unsafe. Microsoft does not support this workaround. Use this workaround at your own risk.\u201d so who knows what that means. As always, use this information at your own risk.<\/p>\n<p>The issue is with an OS level item called tokens, by default the administrator doesn\u2019t share or use the user\u2019s tokens.&nbsp; One entry in the registry, and presto, the administrator can borrow those tokens, so that program gets all the users mapped drives and other shares.&nbsp; What\u2019s not to love.<\/p>\n<p>There are 2 ways of doing it.&nbsp; I created a <a href=\"https:\/\/danvanfleet.com\/wp-content\/uploads\/2012\/09\/EnableLinkedConnections.zip\">Registry file<\/a> that imports the key, or you can easily do it manually here\u2019s how.<\/p>\n<p>Start Regedit, go to<\/p>\n<p><strong>HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem<\/strong><\/p>\n<ol>\n<li>Point to <strong>New<\/strong>, and then click <strong>DWORD Value<\/strong>. <\/li>\n<li>Type EnableLinkedConnections, and then press Enter. <\/li>\n<li>Right-click <strong>EnableLinkedConnections<\/strong>, and then click <strong>Modify<\/strong>. <\/li>\n<li>In the <strong>Value data<\/strong> box, type 1, and then click <strong>OK<\/strong>.<\/li>\n<\/ol>\n<p>Exit Regedit restart the computer and Administratively run programs will get the users shares.&nbsp; They don\u2019t mention why they don\u2019t support this, it likely makes a window where a properly programmed rouge program might exploit some issue. <\/p>\n<p>Don\u2019t forget Reboot, this is a machine level item, typically only read during initial system startup.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I ran across this today and wanted to be sure to save it.&nbsp; I\u2019m not sure where I\u2019ll use it yet, it needs further investigation. One of the interesting road blocks that Microsoft built into Windows Operating systems starting with Vista, so 7, 2008 etc. are included, is when a command window or other program [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[5],"tags":[14,15],"class_list":["post-160","post","type-post","status-publish","format-standard","hentry","category-using-computers","tag-os","tag-registry","entry"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4wyVb-2A","jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/posts\/160","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/comments?post=160"}],"version-history":[{"count":2,"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/posts\/160\/revisions"}],"predecessor-version":[{"id":434,"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/posts\/160\/revisions\/434"}],"wp:attachment":[{"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/media?parent=160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/categories?post=160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/danvanfleet.com\/index.php\/wp-json\/wp\/v2\/tags?post=160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}