Windows 10: Windows 20H2 Runas Savecred Broken

Notorious issue i've found on several of our fleet computers that are running Windows 20H2 Particularly Feature Pack 120.2212.2020.0 No surprises, this has broken several things that runas savecred shortcuts just do not initiate anything. Yes i'm aware of security flaws here.Example : C:\Windows\System32\runas.exe /savecred /user:A-COMPUTER\LocalAdmin "C:\Program Files x86\MyProgram\M10POS.exe"When setting up shortcuts to proper program executables, it will prompt for the local admin password to cache it, but it just does not launch any of the programs. It flashed with the 'Select runas' b

:)

 

Error while opening software in administrator mode using runas command

Using runas /savecred creates a significant security problem. Once the password has been entered and saved, the standard user account now has the ability to run any application as Administrator without entering a password (using the runas /savecred command
to launch any .exe file).

For an explanation describing how to run a command "as administrator" by using a scheduled task, see the post by "C.M." here:

https://superuser.com/questions/581548/runas-savecred-ask-for-password-if-another-user-runs-the-same-batch-file

It's not clear whether that technique will work in your situation, but see the post by "Carlo Costanzo" further down in the same thread for an alternative using VB script.

However, the following sequence of commands in the Command Prompt may do what you want:

cd "C:\Program Files\NPortAdminSuite\bin\"

C:\Windows\System32\runas.exe /user:<ComputerName>\administrator /savecred "C:\Program Files\NPortAdminSuite\bin\npadmer.exe"

 

Update to Win10 Pro v1511, broken runas /netonly

Raised this on TechNet as suggested : Update
to Win10 Pro v1511, broken runas /netonly

Another thread (Using
runas.exe on win10 behaves differently compared to former OS) had a potential fix, but this didn't help my situation.

 

Windows 10 Task Scheduler not finding Admin

@Deepika ... did you have any further suggestions on this? I have found a workaround, but I am not happy to use it as I am now calling the exe through a "Runas" with the "/savecred" option. So this solution is not secure, but it does work.