Thanks! We are not yet at Win7, so I'll not be able to try it for a while. (On my XP boxes, I have a command prompt icon which will first ask for a username/passwd - makes it quick and easy to use an Admin-level CMD window).
I rather like your suggestion of the one-time scheduled job running under System rights, too! -- richard "Andrew S. Baker" <[email protected]> 04/18/2011 02:26 PM Please respond to "NT System Admin Issues" <[email protected]> To "NT System Admin Issues" <[email protected]> Press this button if the "To" is a fax number. Enter in the fax number like 123-456-7890. cc Subject Re: Help with Run as Administrator Compatibility mode - UAC in Windows 7 No idea... Hence the "try" suggestion. :) I'd use the GPO for this particular situation. For others, I use an Administrator level CMD window, as Art recommended, or use on of the other suggestions I provided. ASB (Professional Bio) Harnessing the Advantages of Technology for the SMB market... On Mon, Apr 18, 2011 at 3:18 PM, <[email protected]> wrote: Does CPUA work on Win7 as well? -- richard "Andrew S. Baker" <[email protected]> 04/18/2011 02:03 PM Please respond to "NT System Admin Issues" <[email protected]> To "NT System Admin Issues" <[email protected]> Press this button if the "To" is a fax number. Enter in the fax number like 123-456-7890. cc Subject Re: Help with Run as Administrator Compatibility mode - UAC in Windows 7 If UAC were that easily bypassed, it would be thoroughly abused by malware... If you have a Windows Domain, then use a GPO to add the cert to everyone's system. Or set it up as a one-time scheduled job. The SYSTEM rights should be sufficient. Or, try to use CPUA http://www.joeware.net/freetools/tools/cpau/index.htm ASB (Professional Bio) Harnessing the Advantages of Technology for the SMB market... On Mon, Apr 18, 2011 at 2:46 PM, Jonathan <[email protected]> wrote: Ok, I'm beating my head against the wall here, and Google isn't providing me much by way of insight. I believe this is a UAC issue, but being new to Win7 (I never used Vista), I'm at a loss. I need to install a certificate to the Trusted Root store via a batch file. The trick is, this is being done on laptops that are remotely connected via vpn and are not members of the domain. I've got this command in my batch file: certmgr.exe -add mycertname.cer -s -r localMachine ROOT It works like a champ IF I travel to where I have copied CertMgr.exe (in this case I used the env variable %TEMP%) and right click on certmgr.exe. I go into the compatibility tab and click the checkbox for "Run as Administrator". Is there any way to change that setting from the command line? I'm trying to make this batch as silent and end-user friendly as possible, and this is the ONLY thing keeping me from deploying it. -- Jonathan, A+, MCSA, MCSE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
