New
#1
Running a program as another user without prompting for a password
In our corporate environment we have an application that accesses a centralized database as the currently logged in user. The nature of this application requires giving the user read/write/execute permissions directly to the database.
Obviously this is a security risk since an educated user would then be able to access the database directly from the command line and be able to do things beyond what the application allows.
What we'd like to do is create alternate domain accounts for each user that have the necessary DB permissions and then launch the application as that user instead of the logged in user.
I'm aware of the built in RunAs command but, since that prompts for the password, it wouldn't be any different than the current user having access.
Is there an alternate solution? Something with group policy? A reliable 3rd party utility? (no,replacing the application is not an option)