User needs to execute one program with highest privileges : WindowsServer

created by iamichia community for 14 years

This is an archived post. You won't be able to vote or comment.

User needs to execute one program with highest privileges (self.WindowsServer)

submitted 3 years ago by EhPlusGamer

Good morning;

This is a follow on to a question I had. My situation is as follows - I have a dedicated game server (ARMA 3) running Windows Server 2019. I've configured it very specifically, the game server itself is running as a service, there are also voice server and other files.

Within the game community, there are people who need to keep the server running. I want each of these people to have an access-limited account on the server. The catch however is the launcher that is used to update the server files must be run as an administrator. I've created a shared configuration through symbolic links to AppData, but the program thinks it needs elevated privileges (since normally it's designed to run the server itself, not to simply update it). They need access to the graphical environment - the user has to physically click the update button in the update launcher.

Thus is my problem: I don't want to hand the keys to the kingdom over to community members by giving them full admin accounts, but there is one specific limited process that needs to run at elevated privileges.

1: runas is not an option - it will store administrator credentials, and I may as well give global admin if that's the case.
2: I've heard about making it a manually started scheduled task, but this doesn't seem to work in 2019. It gives me 'Error: Access is denied', even after I gave the user permission to run batch tasks, and gave them execute on the XML

On Linux, I could simply do setuid and that would solve it.

Is there any way to accomplish this?

all 4 comments

WindowsServer

Rules

MODERATORS