You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Feature request: Run as different user, allow smartcard #480
Have you tried to logon with smartcard account?
Verify if the smartcard account exists in your AD.
Verify your account have permissions to read account properties form AD.
Hi Christophe, thanks for the reply. I use the smartcard to run applications using different credentials on a daily basis from this account, so I can use the smartcard in a normal manner everywhere else.
Knowing that your smartcard works in other applications is no help.
Smart card only store user/password. You/I don't know what others applications are doing with this account.
Your user account (on witch ConsoleZ is running) cannot create security descriptor for the smartcard account.
To understand why, we must understand :
if your account is too limited
-- this is a domain account ?
-- this is a local account ?
smartcard account has special purpose
-- can you logon with smartcard account ?
-- this is a domain account ?
Hi Christophe, thanks. The account that I start ConsoleZ with (my normal logon account) is a domain account but not member of local Administrators group - it is member of local Users group (by virtue of being member of Domain Users, which is member of local Users group).
Smartcard user account is also a domain account, but it is a member of local Administrators group.
I can use my normal logon account account to Shift+right click applications using the smartcard. The SysInternals ShellRunas tool also works.
For example, I can use Shift+right click on a PowerShell icon and choose "Run as different user," insert smartcard, enter PIN, and PowerShell launches as the smartcard user.
Activity
cbucher commentedon Jun 4, 2018
Please, try this documented option.
Bill-Stewart commentedon Jun 4, 2018
Thank you. I had that option selected already. The trick is to leave the "run as" username blank in the tab configuration.
I can now authenticate with the smartcard, but when I enter my PIN, I see the following error message, and the new tab does not open:
Unable to create shared objects (reason: (SetEntriesInAcl)No mapping between account names and security IDs was done.
)!
cbucher commentedon Jun 5, 2018
Have you tried to logon with smartcard account?
Verify if the smartcard account exists in your AD.
Verify your account have permissions to read account properties form AD.
Bill-Stewart commentedon Jun 5, 2018
Hi Christophe, thanks for the reply. I use the smartcard to run applications using different credentials on a daily basis from this account, so I can use the smartcard in a normal manner everywhere else.
This is my tab configuration:
cbucher commentedon Jun 8, 2018
Knowing that your smartcard works in other applications is no help.
Smart card only store user/password. You/I don't know what others applications are doing with this account.
Your user account (on witch ConsoleZ is running) cannot create security descriptor for the smartcard account.
To understand why, we must understand :
-- this is a domain account ?
-- this is a local account ?
-- can you logon with smartcard account ?
-- this is a domain account ?
Bill-Stewart commentedon Jun 8, 2018
Hi Christophe, thanks. The account that I start ConsoleZ with (my normal logon account) is a domain account but not member of local Administrators group - it is member of local Users group (by virtue of being member of Domain Users, which is member of local Users group).
Smartcard user account is also a domain account, but it is a member of local Administrators group.
I can use my normal logon account account to Shift+right click applications using the smartcard. The SysInternals ShellRunas tool also works.
For example, I can use Shift+right click on a PowerShell icon and choose "Run as different user," insert smartcard, enter PIN, and PowerShell launches as the smartcard user.
cbucher commentedon Jun 14, 2018
Hi
Can you try this experimental version and report popups you can see during test.
Bill-Stewart commentedon Jun 19, 2018
Hi Christophe, when I run this experimental version, I now see three dialog boxes:
Bill-Stewart commentedon Jul 31, 2018
I am now running Windows 10, build 1803. Same behavior as documented here (same error message).
tamr commentedon Mar 28, 2025
And if it silently crashes on "Run as", uncheck this option and that would fix the issue.