INFO: Anyone Can Run SSARC.EXE if There Is No Admin Password (157985)


The information in this article applies to:

  • Microsoft Visual SourceSafe for Windows 5.0
  • Microsoft Visual SourceSafe for Windows 6.0
This article was previously published under Q157985

SUMMARY

SSARC.EXE and SSRESTOR.EXE are utilities included with Visual SourceSafe 5.0 that allow users to archive specific versions of projects or files and restore those archives back to the original or to a different database.

According to the documentation, SSARC.EXE can only be run by the SourceSafe administrator. However, if the administrator has no password, any user can run the program.

MORE INFORMATION

  1. Run or switch to the SourceSafe Administrator utility and remove the admin password (if there is one).
  2. From the DOS prompt, switch to the VSS\WIN32 directory, and then type:

    "SS WHOAMI"

    Your login name is echoed to the console.
  3. From the server installation of SourceSafe, switch to the WIN32 subdirectory and run SSARC.EXE <archive file to create> <project>. Note that the program runs.
  4. Run or switch to the SourceSafe Administrator utility and create an admin password.
  5. Repeat steps 2 and 3, and note that you will be prompted for the admin password.
Modification Type:MajorLast Reviewed:5/1/2001
Keywords:kbinfo KB157985
©2002 Microsoft Corporation. All rights reserved.