Vista, Domain Adminstration, & MMCs

We are currently implementing the "best practice" method for those of us who
administer the domain (run with standard accounts, use separate accounts with
domain\exchange admin rights when needed), but in Vista, we cannot figure out
how to run a MMC Console as our admin accounts. When we do a RUNAS
/user:domain\adminaccount "MMC.exe mgmtconsole.msc", we get the following
error "740: The requested operation requires elevation". This also happens
when I run it from an elevated command prompt.

runas doesn't get you a new token, hokey and we buged it but came back as
"by design" the best way is to right click a shortcut or setup one up to
run as admin.

--
Josh
http://windowsconnected.com
"Justin" <> wrote in message
news:C89AD702-6104-4394-874E-...
> We are currently implementing the "best practice" method for those of us
> who
> administer the domain (run with standard accounts, use separate accounts
> with
> domain\exchange admin rights when needed), but in Vista, we cannot figure
> out
> how to run a MMC Console as our admin accounts. When we do a RUNAS
> /user:domain\adminaccount "MMC.exe mgmtconsole.msc", we get the following
> error "740: The requested operation requires elevation". This also happens
> when I run it from an elevated command prompt.

That does not work!!

If I tell it to "Run as Administrator", it runs it as a LOCAL ADMINISTRATOR.

That does not help if you need to authenticate as a
DOMAIN\ENTERPRISE\EXCHANGE ADMINISTRATOR. Our new corporate policy is that no
one is allowed to run interactively (unless that is the only option) as an
Domain\Etc. Admin. This is "Best Practices" from MS!

So what is MS going to do for us? Make Admins run WinXP?

I am sorry if my tone upsets anyone, but I spent 8hrs today beating my head
into the wall today trying to get this to work!

"Josh" wrote:

> runas doesn't get you a new token, hokey and we buged it but came back as
> "by design" the best way is to right click a shortcut or setup one up to
> run as admin.
>
> --
> Josh
> http://windowsconnected.com
> "Justin" <> wrote in message
> news:C89AD702-6104-4394-874E-...
> > We are currently implementing the "best practice" method for those of us
> > who
> > administer the domain (run with standard accounts, use separate accounts
> > with
> > domain\exchange admin rights when needed), but in Vista, we cannot figure
> > out
> > how to run a MMC Console as our admin accounts. When we do a RUNAS
> > /user:domain\adminaccount "MMC.exe mgmtconsole.msc", we get the following
> > error "740: The requested operation requires elevation". This also happens
> > when I run it from an elevated command prompt.
>