Questions tagged [administrative-privileges]

Filter by
Sorted by
Tagged with
0 votes
2 answers
126 views

Run a PowerShell script once on all computers as admin via GPO without changing execution policy

I have a PowerShell script that I need to run once on all computers in my Active Directory domain. A large number of computers are off at any given time, so a GPO would allow us to ensure that it ...
user avatar
  • 1
1 vote
1 answer
26 views

RHEL 8: Administrator vs. Auditor role

On RHEL 8, are there prepared functions, methods, processes or tools to implement administrator/operator and auditor roles in the following way: An administrator/operator should be able to do almost ...
user avatar
0 votes
1 answer
31 views

Alert when Admin logs into Azure

I setup an Office365/Azure tenancy for a small charity I help. I am keen to setup automated reporting that sends an email when someone logs in as an admin account (i.e with a particular role or group)....
user avatar
  • 1
0 votes
1 answer
36 views

How does Windows establish whether application makes changes to device

For applications that trigger the UAC ("Do you want to allow this app to make changes to your device" dialog), which are the characteristics that are detected by Windows in order to decide ...
user avatar
  • 300
0 votes
0 answers
22 views

add local users to GPP managed groups

I (hopefully:) understand the usage of GPP management of restricted groups. I do it with Item-Level targetting but have one problem which I have no clue why it is not working. When using Local Group ...
user avatar
2 votes
1 answer
371 views

Can i update the windows registry entries for HKEY_CURRENT_USER values without elevated privileges?

Links such as the following suggest that I should be able to edit the registry without elevated privileges, as long as I only update HKEY_CURRENT_USER. https://blog.codeinside.eu/2015/08/11/reg-exe-or-...
user avatar
0 votes
0 answers
265 views

User directory does not exist when logging in via ssh to a Synology NAS

On a Synology NAS with DSM 7.0 I have created through the Graphical UI a dedicated admin user (as recommended in Synology's setup procedure), then I have enabled ssh login and now I can ssh into the ...
user avatar
  • 111
0 votes
2 answers
182 views

Windows 11 home/ Win 10 Pro. How to prevent standard users from installing software? [closed]

It seems that I cannot prevent a standard account from installing software. I tried that on windows 10 Pro and on Windows 11 home. I have a problem similar to this here. But the admin popup did not ...
user avatar
  • 127
0 votes
1 answer
363 views

Running Powershell scripts pushed from AD GPO as admin on domain computers

Needed some help getting a simple task done at work. I have about 30 machines in my work domain that i want to run a power-shell script on at startup. I have created a GPO that runs the script on all ...
user avatar
  • 1
0 votes
0 answers
21 views

Windows, Collect information that requires admin rights

I'm making an enterprise dashboard for system status/etc but finding that most of the commands I'll need to run on individual servers, will require administrative privileges to collect the data. For ...
user avatar
  • 101
0 votes
0 answers
30 views

EXCHANGE and MAPI : domain admins not allowed

I can't configure Outlook 2013 with Exchange 2016 as domain admin, it asks me for password, i nter it and reask as well. No problem with users, only with Administrators (Builtin, domain admins...) Is ...
user avatar
  • 129
0 votes
1 answer
460 views

running batch file as administrator privilege in clients with gpo(scripts/logon)

I want to run a batch file on all my domain clients via gpo(scripts/logon), but the problem is that to run a batch file, administrator privilege is required. I wanted to know is there any command or ...
user avatar
0 votes
0 answers
46 views

ADFS backup task scheduler as powershell as admin

I'm trying to create a scheduled task to backup my ADFS using the 'backup-adfs' PowerShell command. I've already created the script and ran it with an admin user (with 'run as administrator') and its ...
user avatar
4 votes
5 answers
5k views

How can root start a process that only root can kill?

It is easy to start a process at background or make it as systemd service. However, if I want to start a process that monitors activities on the Linux machine, it fells to the target of attacks. If ...
user avatar
  • 350
1 vote
1 answer
45 views

Hiring a contractor to migrate databases and websites. What kind of security plan should I put in place to mitigate risks?

We have a physical machine serving databases and websites. We want to contract a consultant for this planned migration from the older physical Windows machine to an up to date brand new Virtual ...
user avatar
0 votes
2 answers
211 views

Granting full global domain admin rights to license reseller?

We are buying Microsoft 365 licenses and the reseller is requesting full global domain admin rights in order to administer the licenses. I'm thinking, "no way in Hello Kitty", but maybe I'm ...
user avatar
  • 256
0 votes
1 answer
653 views

How can I interact with a new Postgres installation if I can't sudo -u postgres?

I have installed Postgres on an Ubuntu 16.04 server, but I'm working in a corporate environment and am not able to sudo -u postgres (I have sudo rights, but can't impersonate another user). Is there ...
user avatar
  • 101
0 votes
0 answers
72 views

Run cmd command as admin through the pipe

I find myself in a bit of a weird situation and I'm hoping someone would be able to advise for me. I have a tool, RMM datto, which allows myself to run commands to all machines on the domain. I'm ...
user avatar
  • 135
0 votes
2 answers
66 views

How to re-apply original inherited permissions to files created while being administrator?

I hope someone can answer this once and for all, this is driving me mad for months now. Platform: Windows Server, any version. This problem doesn't happen on a workstation. Problem: In a folder, ...
user avatar
  • 113
0 votes
1 answer
252 views

Global Administrator / disable having access to the email "open another mailbox..."

I am global admin on a domain and as the name implies, I have access to all emails and having access to their emails via "open another mailbox..." in exchange. Now, one thing I noticed is that I am ...
user avatar
  • 3
1 vote
1 answer
44 views

Allowing non admin user to run a specific software updater without admin password

I need to allow a non-admin network user to run a specific exe as local administrator on Windows 7. Basically what I need is not to be prompted for admin credentials when I run that specific exe which ...
user avatar
0 votes
1 answer
770 views

Linux root using domain users kerberos tickets

We’ve just migrated a set of Centos6/7 hosts from pure OpenLDAP based authentication to IPA and Kerberos. What surprised us is that a local root user on an IPA enrolled host can use ‘su’ to become an ...
user avatar
  • 173
2 votes
1 answer
305 views

How to make a service (or the system process) impersonate the *elevated* variant of a user account?

In my network, there is a Windows 2008 R2 server with network name Dax. On that server, I have (among others, of course): a hard disk drive, mounted as E:\ a folder E:\odo an SMB share \\Dax\odo ...
user avatar
  • 519
2 votes
1 answer
38 views

Dialogs still ask for user password (instead of root's) after adding rootpw to sudoers file

To add an extra layer of security I'm using the rootpw option in the sudoers file and while it works perfectly fine from the shell, when a specific command invokes the GUI version of "elevation", only ...
user avatar
  • 31
0 votes
2 answers
1k views

How to prevent users from installing software on Windows 2016 on Azure?

I have an application server running Remote Desktop Session Host (RDSH) on Windows Server 2016 in an isolated Azure cloud environment and would like to prevent the users (who login via RDP) from being ...
user avatar
2 votes
1 answer
253 views

Windows 2008R2 RDP only works for Standard User but not for an Admin User

I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the ...
user avatar
0 votes
1 answer
728 views

Accessing Local Directory via UNC Prompts for Credentials

We have a Windows 2016 server with the hostname, foo.example.com. When logged into it as a Domain Admin, if we enter itself as a UNC path in Windows Explorer... \\foo.example.com\d$ ...we can ...
user avatar
  • 83
0 votes
1 answer
186 views

Administrators lost access to network drive and remote desktop Windows Server 2008 [duplicate]

Three days ago, all the users with administrator role could not connect to our server (Windows Server 2008 R2) via network drive or remote desktop, while general users could apply these functions as ...
user avatar
3 votes
1 answer
141 views

Can I grant "Virtual Disk Service" to a non-local administrator?

Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation: SQL Clone Agent requirements An agent should be installed on the same machine as any SQL Server ...
user avatar
1 vote
1 answer
650 views

Specific dhcp administration across multiple dhcp servers

Currently we have multiple DCs in our primary site and a remote location which has its own DC. All of those DCs are on the same domain, though. The remote IT team wants to be able to manage their ...
user avatar
  • 21
0 votes
1 answer
220 views

Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016

I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page: -- Reset passwords in a particular Org Unit -- Create ...
user avatar
  • 374
1 vote
0 answers
658 views

How to restrict administrator access by source IP for any protocol on windows ?

I want to make sure that administrative access to Windows domain controllers are allowed only from specific IP addresses. Note: I mean not only RDP access but ANY port/protocol that allows ...
user avatar
  • 11
0 votes
0 answers
26 views

How to remotly validate an installation for a basic user?

We have 10 PC on the network and we don't have ActiveDirectory. Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
user avatar
  • 1
0 votes
1 answer
246 views

Windows - Fine-grained administrator permissions

Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer. Is there any way to limit what a program can do when run as administrator. Most ...
user avatar
0 votes
0 answers
41 views

Windows 7/Windows 10: Preconfigure USB network adapter

One device our users have to interact with is connected to via a generic Ethernet over USB cable. After being connected to that device, the PC needs to be configured with a specific static IP adress ...
user avatar
  • 101
0 votes
1 answer
65 views

Possible to provide full Domain Admin rights, but disallow creation of new Admin accounts?

I would like to provide full administrative access to servers within the domain to another admin, with a single exception: the administrator should be unable to create new administrator accounts. I ...
user avatar
  • 227
9 votes
1 answer
18k views

Scheduled Task in Windows Server 2016, run by non-admin Users

In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps: Scheduled Task: run under system, execute ...
user avatar
1 vote
1 answer
153 views

What happens to Task Scheduler if User has no permission?

I've a little question: Lets say I have a Windows 2012 Server where I created a Scheduled Task with my Useraccount. I selected the option "Run this task even if user is not logged in" - so I don't ...
user avatar
0 votes
0 answers
116 views

Installer file not launching with Administrative privileges in Windows 10

I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs. I joined them to my Domain, then logged in as the Domain ...
user avatar
  • 1,574