Well, i've gotten SU working properly now... but I cannot seem to get it working when i've bat2exec (v.1.5), and secure.exe'd it.. :/

What I wanted to do was from the main script decide whether SU needs to be used or not (if @INWIN = 1, user has admin privilegues?), if SU needs to be launched for a separate script to work properly, I copy that script to the users %TEMP% (always renaming it to "AdmInst.kix") from within my main script, and then call the bat2exec'd + secure'd batch which launches a new KiX process that executes the script, like this:

code:

---

@ECHO OFF
REM *** Make a copy of the local kix32.exe file, so that another session can
REM *** be started with the administrator account.
REM *** "CD" to make sure that the system finds XCOPY & SU/SUSS...
CD "%WINDIR%\System32"
IF NOT EXIST "%TEMP%\kix32.exe" XCOPY "C:\kix32.exe" "%TEMP%\" /D /H /I /R >NUL
REM *** Start the KiXtart script as <domain>\Administrator.
REM *** Environment variable "SU_PASSWORD" must be set, otherwise SU might mess up...
SET SU_PASSWORD=<password>
IF NOT EXIST "%TEMP%\kix32.exe" GOTO NOCOPY
IF NOT EXIST "%TEMP%\AdmInst.kix" GOTO NOFILE
ECHO <password>|su Administrator "%TEMP%\kix32 %TEMP%\AdmInst.kix" <domain>
GOTO END
:NOCOPY
ECHO Couldn't copy kix32.exe!
GOTO END
:NOFILE
ECHO Couldn't find the script!
:END
EXIT 

---

This script works flawlessly before I bat2exec + secure it... Any ideas?

[ 03 October 2001: Message edited by: masken ]

I don't see any reason that these would be causing a problem, but those differ from the way I've used SU successfully several times.

I'm not sure what BAT2EXEC your using, but I use BAT2EXEC 1.5 from Ziff Communications Co. To encrypt my ".com" file, I use Secure v2.1b.

I also pipe the password to SU, as you can see. The reason why I set the environment variable is that I didn't get SU working until I declared that variable.

As mentioned, this batch work if I run it just as it is, but it doesn't work after i've bat2exec'd + secure'd it... :/

What options for bat2exec, repectively secure do you use?

For SECURE, I use option 1 (print 'this is corrupted' then stop) for the "Pick Fail Option". I also enable the check file length.

Also, instead of CALLing your com/executable file, try using SHELL and see if it works.

Does it copy over your AdmInst.kix script when your executable is called from kix?

Will:
FYI: Simply using BAT2EXEC will not secure your password (if it had worked in your case). One could easily read your username and password by looking at it in a Hex editor or even notepad. However, since you can redirect the password to SU from a text file, you should be able to pipe the password to it using echo (ie: ECHO password|su administrator "notepad.exe"). Run BAT2EXEC on that, then ENCRYPT it with a program like SECURE.

Greetings,
Kamikaze

I do not believe it's the environment variable, since I tried without it before (see this thread) with the same results...

But what I HAVE discovered is that secure.exe v.2.10 is really screwed. It somehow remembers the old inputname and if that file doesn't exists it creates one... no miracle that the encrypted *.exe could go wrong... check this out:

code:

---

╔════════════════════════λ 2;═════════════════════════	 552;════════════════════════╗
║              UNINST2.COM secured successfully to RUNINST3.COM             ║
║                                                                           ║
║                                                                           ║
║  old file length (on disk)    0      new file length (on disk)    538     ║
║  security check devices       PASS   encoding devices             PASS    ║
║  old header length            0      new header length            0       ║
║  start address ffset         FFFFFFF0h : 100h                            ║
║  time taken                   0.0 min.                                    ║
║                                                                           ║
║                                                                           ║
║                                                                           ║
╚════════════════════════λ 2;═════════════════════════	 552;════════════════════════╝

---

I'll download a new version of secure and try again..

[ 05 October 2001: Message edited by: masken ]

Wanna know what happened now? You'll NEVER guess! I bat2exec'd this:

code:

---

@ECHO OFF
SET SU_PASSWORD=<password>
ECHO <password>|su Administrator "%TEMP%\kix32 %TEMP%\AdmInst.kix" <domain>
EXIT 

---

Then I ran it, and here's the interesting part, the marker started wandering in the DOSprompt, and my printer started printing out it's contents! Wooot! How''s that on a weirdness scale?

Try this..

code:

---

ECHO <password>|su Administrator "%TEMP%\kix32 %TEMP%\AdmInst.kix"

---

Leave out the @ECHO OFF, SU_PASSWORD, ETC. What happens with the above code when you run it? If that doesn't work, try replacing %TEMP% with the actual path (just for the sake of argument).

As far as your printer, that is rather odd.

I'm going crazy here... It works like a charm before the bat2exec and encryption... :/

I just got done trying to replicate your problem, but of course things worked fine on my end.

Here's what I did...

code:

---

echo password|su ADMIN "%TEMP%\kix32.exe %TEMP%\AdmInst.kix"

---

I used BAT2EXEC to convert the above code to an executable. Then I ran the .com file to make sure it still worked. Then I secured it, and ran it again with no problems.

Then AdmInst.kix I used was just a simple registry check (ReadValue) and a couple things to output some text to make sure it was actually working.

What exactly is it doing or not doing on your end? Is it successfully launching your kix script?

BTW.. This test was done using KIX 3.63.

The bat2exec and secure21 files you can find also on our site
http://home.wanadoo.nl/scripting
Topic
http://kixtart.org/cgi-bin/ultimatebb.cgi?ubb=get_topic&f=1&t=002750
let see how we are using both tools to create extremly secure
EXE file from a BAT file. At the moment we didn't discover any problem
with them.
A possible problem can be: you aren't using the standard of BATch language.
Sometimes we see such structures on the board.
An example of such structure is

code:

---

 dir 1>file1 2>file2

---

Symbol on our homepage has been linked to related http://kixtart.org topic.

[ 17 October 2001: Message edited by: MCA ]