Running a program as another user without prompting for a password

[Stalag]

In our corporate environment we have an application that accesses a centralized database as the currently logged in user. The nature of this application requires giving the user read/write/execute permissions directly to the database.

Obviously this is a security risk since an educated user would then be able to access the database directly from the command line and be able to do things beyond what the application allows.

What we'd like to do is create alternate domain accounts for each user that have the necessary DB permissions and then launch the application as that user instead of the logged in user.

I'm aware of the built in RunAs command but, since that prompts for the password, it wouldn't be any different than the current user having access.

Is there an alternate solution? Something with group policy? A reliable 3rd party utility? (no,replacing the application is not an option)

 

[Brink]

Hello Stalag, and welcome to Seven Forums.

You might be able to use the tutorial below to do so. However, it does request the administrator's password for only the first time it's ran by the user. You could log in as that user and run it to enter the password for the first run. Afterward's it runs automatically without asking for the password. The user never sees or is able to see the password.

http://www.sevenforums.com/tutorials/193743-elevated-program-shortcut-create-standard-user.html

Hope this may help.
Shawn