Questions tagged [administrative-privileges]
The administrative-privileges tag has no usage guidance.
39
questions
0
votes
2
answers
126
views
Run a PowerShell script once on all computers as admin via GPO without changing execution policy
I have a PowerShell script that I need to run once on all computers in my Active Directory domain. A large number of computers are off at any given time, so a GPO would allow us to ensure that it ...
- 1
1
vote
1
answer
26
views
RHEL 8: Administrator vs. Auditor role
On RHEL 8, are there prepared functions, methods, processes or tools to implement administrator/operator and auditor roles in the following way:
An administrator/operator should be able to do almost ...
- 396
0
votes
1
answer
31
views
Alert when Admin logs into Azure
I setup an Office365/Azure tenancy for a small charity I help.
I am keen to setup automated reporting that sends an email when someone logs in as an admin account (i.e with a particular role or group)....
- 1
0
votes
1
answer
36
views
How does Windows establish whether application makes changes to device
For applications that trigger the UAC ("Do you want to allow this app to make changes to your device" dialog), which are the characteristics that are detected by Windows in order to decide ...
- 300
0
votes
0
answers
22
views
add local users to GPP managed groups
I (hopefully:) understand the usage of GPP management of restricted groups. I do it with Item-Level targetting but have one problem which I have no clue why it is not working.
When using Local Group ...
2
votes
1
answer
371
views
Can i update the windows registry entries for HKEY_CURRENT_USER values without elevated privileges?
Links such as the following suggest that I should be able to edit the registry without elevated privileges, as long as I only update HKEY_CURRENT_USER.
https://blog.codeinside.eu/2015/08/11/reg-exe-or-...
- 133
0
votes
0
answers
265
views
User directory does not exist when logging in via ssh to a Synology NAS
On a Synology NAS with DSM 7.0 I have created through the Graphical UI a dedicated admin user (as recommended in Synology's setup procedure), then I have enabled ssh login and now I can ssh into the ...
- 111
0
votes
2
answers
182
views
Windows 11 home/ Win 10 Pro. How to prevent standard users from installing software? [closed]
It seems that I cannot prevent a standard account from installing software. I tried that on windows 10 Pro and on Windows 11 home. I have a problem similar to this here. But the admin popup did not ...
- 127
0
votes
1
answer
363
views
Running Powershell scripts pushed from AD GPO as admin on domain computers
Needed some help getting a simple task done at work.
I have about 30 machines in my work domain that i want to run a power-shell script on at startup.
I have created a GPO that runs the script on all ...
- 1
0
votes
0
answers
21
views
Windows, Collect information that requires admin rights
I'm making an enterprise dashboard for system status/etc but finding that most of the commands I'll need to run on individual servers, will require administrative privileges to collect the data. For ...
- 101
0
votes
0
answers
30
views
EXCHANGE and MAPI : domain admins not allowed
I can't configure Outlook 2013 with Exchange 2016 as domain admin, it asks me for password, i nter it and reask as well.
No problem with users, only with Administrators (Builtin, domain admins...)
Is ...
- 129
0
votes
1
answer
460
views
running batch file as administrator privilege in clients with gpo(scripts/logon)
I want to run a batch file on all my domain clients via gpo(scripts/logon), but the problem is that to run a batch file, administrator privilege is required.
I wanted to know is there any command or ...
0
votes
0
answers
46
views
ADFS backup task scheduler as powershell as admin
I'm trying to create a scheduled task to backup my ADFS using the 'backup-adfs' PowerShell command. I've already created the script and ran it with an admin user (with 'run as administrator') and its ...
4
votes
5
answers
5k
views
How can root start a process that only root can kill?
It is easy to start a process at background or make it as systemd service.
However, if I want to start a process that monitors activities on the Linux machine, it fells to the target of attacks. If ...
- 350
1
vote
1
answer
45
views
Hiring a contractor to migrate databases and websites. What kind of security plan should I put in place to mitigate risks?
We have a physical machine serving databases and websites. We want to contract a consultant for this planned migration from the older physical Windows machine to an up to date brand new Virtual ...
- 375
0
votes
2
answers
211
views
Granting full global domain admin rights to license reseller?
We are buying Microsoft 365 licenses and the reseller is requesting full global domain admin rights in order to administer the licenses.
I'm thinking, "no way in Hello Kitty", but maybe I'm ...
- 256
0
votes
1
answer
653
views
How can I interact with a new Postgres installation if I can't sudo -u postgres?
I have installed Postgres on an Ubuntu 16.04 server, but I'm working in a corporate environment and am not able to sudo -u postgres (I have sudo rights, but can't impersonate another user).
Is there ...
- 101
0
votes
0
answers
72
views
Run cmd command as admin through the pipe
I find myself in a bit of a weird situation and I'm hoping someone would be able to advise for me.
I have a tool, RMM datto, which allows myself to run commands to all machines on the domain. I'm ...
- 135
0
votes
2
answers
66
views
How to re-apply original inherited permissions to files created while being administrator?
I hope someone can answer this once and for all, this is driving me mad for months now.
Platform:
Windows Server, any version. This problem doesn't happen on a workstation.
Problem:
In a folder, ...
- 113
0
votes
1
answer
252
views
Global Administrator / disable having access to the email "open another mailbox..."
I am global admin on a domain and as the name implies, I have access to all emails and having access to their emails via "open another mailbox..." in exchange.
Now, one thing I noticed is that I am ...
- 3
1
vote
1
answer
44
views
Allowing non admin user to run a specific software updater without admin password
I need to allow a non-admin network user to run a specific exe as local administrator on Windows 7. Basically what I need is not to be prompted for admin credentials when I run that specific exe which ...
0
votes
1
answer
770
views
Linux root using domain users kerberos tickets
We’ve just migrated a set of Centos6/7 hosts from pure OpenLDAP based authentication to IPA and Kerberos. What surprised us is that a local root user on an IPA enrolled host can use ‘su’ to become an ...
- 173
2
votes
1
answer
305
views
How to make a service (or the system process) impersonate the *elevated* variant of a user account?
In my network, there is a Windows 2008 R2 server with network name Dax. On that server, I have (among others, of course):
a hard disk drive, mounted as E:\
a folder E:\odo
an SMB share \\Dax\odo ...
- 519
2
votes
1
answer
38
views
Dialogs still ask for user password (instead of root's) after adding rootpw to sudoers file
To add an extra layer of security I'm using the rootpw option in the sudoers file and while it works perfectly fine from the shell, when a specific command invokes the GUI version of "elevation", only ...
- 31
0
votes
2
answers
1k
views
How to prevent users from installing software on Windows 2016 on Azure?
I have an application server running Remote Desktop Session Host (RDSH) on Windows Server 2016 in an isolated Azure cloud environment and would like to prevent the users (who login via RDP) from being ...
2
votes
1
answer
253
views
Windows 2008R2 RDP only works for Standard User but not for an Admin User
I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the ...
- 123
0
votes
1
answer
728
views
Accessing Local Directory via UNC Prompts for Credentials
We have a Windows 2016 server with the hostname, foo.example.com.
When logged into it as a Domain Admin, if we enter itself as a UNC path in Windows Explorer...
\\foo.example.com\d$
...we can ...
- 83
0
votes
1
answer
186
views
Administrators lost access to network drive and remote desktop Windows Server 2008 [duplicate]
Three days ago, all the users with administrator role could not connect to our server (Windows Server 2008 R2) via network drive or remote desktop, while general users could apply these functions as ...
- 11
3
votes
1
answer
141
views
Can I grant "Virtual Disk Service" to a non-local administrator?
Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation:
SQL Clone Agent requirements
An agent should be installed on the same machine as any SQL Server ...
- 185
1
vote
1
answer
650
views
Specific dhcp administration across multiple dhcp servers
Currently we have multiple DCs in our primary site and a remote location which has its own DC. All of those DCs are on the same domain, though.
The remote IT team wants to be able to manage their ...
- 21
0
votes
1
answer
220
views
Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016
I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page:
-- Reset passwords in a particular Org Unit
-- Create ...
- 374
1
vote
0
answers
658
views
How to restrict administrator access by source IP for any protocol on windows ?
I want to make sure that administrative access to Windows domain controllers are allowed only from specific IP addresses.
Note: I mean not only RDP access but ANY port/protocol that allows ...
- 11
0
votes
0
answers
26
views
How to remotly validate an installation for a basic user?
We have 10 PC on the network and we don't have ActiveDirectory.
Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
- 1
0
votes
1
answer
246
views
Windows - Fine-grained administrator permissions
Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer.
Is there any way to limit what a program can do when run as administrator.
Most ...
- 215
0
votes
0
answers
41
views
Windows 7/Windows 10: Preconfigure USB network adapter
One device our users have to interact with is connected to via a generic Ethernet over USB cable. After being connected to that device, the PC needs to be configured with a specific static IP adress ...
- 101
0
votes
1
answer
65
views
Possible to provide full Domain Admin rights, but disallow creation of new Admin accounts?
I would like to provide full administrative access to servers within the domain to another admin, with a single exception: the administrator should be unable to create new administrator accounts.
I ...
- 227
9
votes
1
answer
18k
views
Scheduled Task in Windows Server 2016, run by non-admin Users
In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps:
Scheduled Task: run under system, execute ...
- 91
1
vote
1
answer
153
views
What happens to Task Scheduler if User has no permission?
I've a little question:
Lets say I have a Windows 2012 Server where I created a Scheduled Task with my Useraccount. I selected the option "Run this task even if user is not logged in" - so I don't ...
- 113
0
votes
0
answers
116
views
Installer file not launching with Administrative privileges in Windows 10
I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs.
I joined them to my Domain, then logged in as the Domain ...
- 1,574