Endpoint Encryption

 View Only

encryption desktop using runas.exe

  • 1.  encryption desktop using runas.exe

    Posted Apr 27, 2016 11:07 AM

    We are trying to use the File Share Encryption and because of the way we run a particular product, it is giving us fits. The product is Angoss Knowledge Studio. Due to licensing constrains, the appliaction is started with the runas.exe command and all instances are run as a service user account, but the user is logged in as themselves(for compliance reasons). What happens, is the application runs, but the PGPtray and its dependent services, dont realize when it trys to access an encrypted share, so they get access denied. We were able to figure out that if you stop the tray service and the other services and start them in the same script as the angoss program, it is able to access the share from the program. But, the user then loses the ability to access the share from any other applications like windows explorer. It seems it will only run one instance of the application. The format of the scripts is below. Any input or ideas are appreciated.

     

    set WshShell = WScript.CreateObject("WScript.Shell")
    strCmd="C:\Program Files\Angoss\runangoss.cmd"
    strUser="claire@xxxxxxx.net"
    strPass="xxxxxxxx"
    WshShell.Run "c:\windows\system32\runas.exe " & " /user:" & strUser & " " & chr(34) & strCmd & chr(34)
    WScript.Sleep 1000
    WshShell.Sendkeys strPass & "~"

     

    (the cmd it calls)

    start "" "C:\Program Files (x86)\PGP Corporation\PGP Desktop\PGPtray.exe"
    "C:\Program Files\Angoss\Workstation 9.4\bin\Angoss.KSMain.exe"