none
GPO : runas hide show

    Question

  • Hello,

    What is the GPO, inside AD, to show or hide the menu "runas" ?

    Regards,

    • Moved by nzpcmad1 Monday, February 20, 2017 5:31 PM From ADFS
    Monday, February 20, 2017 5:21 PM

Answers

  • Hi,

    to complement the Ryan instructions, you can create a GPO to disable the Runas.exe to protect the user run a command line.

    http://www.windowsdevcenter.com/pub/a/windows/2004/03/16/serverhacks_runas.html

    • Marked as answer by Cerkyr Tuesday, February 21, 2017 4:40 PM
    Monday, February 20, 2017 5:56 PM
  • Hi,
    As FGInacio said, you could use Software Restriction Policies in the group policy to disable runas.exe: https://technet.microsoft.com/en-us/library/hh831534(v=ws.11).aspx
    Alternatively, you could set the following registry to disable runas, then use group policy preference to deploy this registry into all clients:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    Create a new DWORD value named HideRunAsVerb and assign it a value of 1.
    Regarding to deploy registry item via group policy, please refer to: https://technet.microsoft.com/en-us/library/cc753092(v=ws.11).aspx
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    • Marked as answer by Cerkyr Tuesday, February 21, 2017 4:40 PM
    Tuesday, February 21, 2017 9:00 AM
    Moderator
  • Trough REGEDIT :

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

    New DWORD  : HideRunAsVerb

    Value : 1 to hide (disable)

    • Marked as answer by Cerkyr Tuesday, February 21, 2017 4:40 PM
    Tuesday, February 21, 2017 4:40 PM

All replies

  • There actually isn't a way to do the nativly with Group Policy. However, you can use Group Policy to push out a registry edit to disable the run as command from the context menu of Windows Explorer. 

    There is a guide on doing that here:

    https://www.sevenforums.com/tutorials/200558-run-administrator-add-remove-context-menu-windows-7-a.html

    You can add those registry edits to a GPO in the Preferences section. 


    Cheers,

    Ryan

    Microsoft Server Engineer

    Blog:   Twitter:   LinkedIn:   

    Please remember to mark the replies as answers if they help.

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Monday, February 20, 2017 5:26 PM
  • Hi,

    to complement the Ryan instructions, you can create a GPO to disable the Runas.exe to protect the user run a command line.

    http://www.windowsdevcenter.com/pub/a/windows/2004/03/16/serverhacks_runas.html

    • Marked as answer by Cerkyr Tuesday, February 21, 2017 4:40 PM
    Monday, February 20, 2017 5:56 PM
  • Hi,
    As FGInacio said, you could use Software Restriction Policies in the group policy to disable runas.exe: https://technet.microsoft.com/en-us/library/hh831534(v=ws.11).aspx
    Alternatively, you could set the following registry to disable runas, then use group policy preference to deploy this registry into all clients:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    Create a new DWORD value named HideRunAsVerb and assign it a value of 1.
    Regarding to deploy registry item via group policy, please refer to: https://technet.microsoft.com/en-us/library/cc753092(v=ws.11).aspx
    Best regards,
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    • Marked as answer by Cerkyr Tuesday, February 21, 2017 4:40 PM
    Tuesday, February 21, 2017 9:00 AM
    Moderator
  • The proposal is to download reg files.
    It could be great to obtain the content of each reg file.

    Tuesday, February 21, 2017 4:37 PM
  • Trough REGEDIT :

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer

    New DWORD  : HideRunAsVerb

    Value : 1 to hide (disable)

    • Marked as answer by Cerkyr Tuesday, February 21, 2017 4:40 PM
    Tuesday, February 21, 2017 4:40 PM