Questions tagged [administrative-privileges]
The administrative-privileges tag has no usage guidance.
26
questions
1
vote
1answer
39 views
Hiring a contractor to migrate databases and websites. What kind of security plan should I put in place to mitigate risks?
We have a physical machine serving databases and websites. We want to contract a consultant for this planned migration from the older physical Windows machine to an up to date brand new Virtual ...
0
votes
0answers
73 views
ICACLS: Write Access for Program Files folder - handle invalid
A application (C:\Program Files (x86)\MyApp) needs to write to its own program directory in order to update itself.
In Windows 10 this is not possible by default.
[I know that it is no good practice ...
0
votes
2answers
111 views
Granting full global domain admin rights to license reseller?
We are buying Microsoft 365 licenses and the reseller is requesting full global domain admin rights in order to administer the licenses.
I'm thinking, "no way in Hello Kitty", but maybe I'm ...
0
votes
1answer
160 views
How can I interact with a new Postgres installation if I can't sudo -u postgres?
I have installed Postgres on an Ubuntu 16.04 server, but I'm working in a corporate environment and am not able to sudo -u postgres (I have sudo rights, but can't impersonate another user).
Is there ...
0
votes
0answers
43 views
Run cmd command as admin through the pipe
I find myself in a bit of a weird situation and I'm hoping someone would be able to advise for me.
I have a tool, RMM datto, which allows myself to run commands to all machines on the domain. I'm ...
0
votes
2answers
42 views
How to re-apply original inherited permissions to files created while being administrator?
I hope someone can answer this once and for all, this is driving me mad for months now.
Platform:
Windows Server, any version. This problem doesn't happen on a workstation.
Problem:
In a folder, ...
0
votes
1answer
95 views
Global Administrator / disable having access to the email “open another mailbox…”
I am global admin on a domain and as the name implies, I have access to all emails and having access to their emails via "open another mailbox..." in exchange.
Now, one thing I noticed is that I am ...
1
vote
1answer
35 views
Allowing non admin user to run a specific software updater without admin password
I need to allow a non-admin network user to run a specific exe as local administrator on Windows 7. Basically what I need is not to be prompted for admin credentials when I run that specific exe which ...
0
votes
1answer
562 views
Linux root using domain users kerberos tickets
We’ve just migrated a set of Centos6/7 hosts from pure OpenLDAP based authentication to IPA and Kerberos. What surprised us is that a local root user on an IPA enrolled host can use ‘su’ to become an ...
2
votes
1answer
200 views
How to make a service (or the system process) impersonate the *elevated* variant of a user account?
In my network, there is a Windows 2008 R2 server with network name Dax. On that server, I have (among others, of course):
a hard disk drive, mounted as E:\
a folder E:\odo
an SMB share \\Dax\odo ...
2
votes
1answer
31 views
Dialogs still ask for user password (instead of root's) after adding rootpw to sudoers file
To add an extra layer of security I'm using the rootpw option in the sudoers file and while it works perfectly fine from the shell, when a specific command invokes the GUI version of "elevation", only ...
0
votes
2answers
769 views
How to prevent users from installing software on Windows 2016 on Azure?
I have an application server running Remote Desktop Session Host (RDSH) on Windows Server 2016 in an isolated Azure cloud environment and would like to prevent the users (who login via RDP) from being ...
2
votes
1answer
210 views
Windows 2008R2 RDP only works for Standard User but not for an Admin User
I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the ...
0
votes
1answer
468 views
Accessing Local Directory via UNC Prompts for Credentials
We have a Windows 2016 server with the hostname, foo.example.com.
When logged into it as a Domain Admin, if we enter itself as a UNC path in Windows Explorer...
\\foo.example.com\d$
...we can ...
0
votes
1answer
172 views
Administrators lost access to network drive and remote desktop Windows Server 2008 [duplicate]
Three days ago, all the users with administrator role could not connect to our server (Windows Server 2008 R2) via network drive or remote desktop, while general users could apply these functions as ...
3
votes
1answer
121 views
Can I grant “Virtual Disk Service” to a non-local administrator?
Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation:
SQL Clone Agent requirements
An agent should be installed on the same machine as any SQL Server ...
1
vote
1answer
485 views
Specific dhcp administration across multiple dhcp servers
Currently we have multiple DCs in our primary site and a remote location which has its own DC. All of those DCs are on the same domain, though.
The remote IT team wants to be able to manage their ...
0
votes
1answer
153 views
Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016
I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page:
-- Reset passwords in a particular Org Unit
-- Create ...
1
vote
0answers
361 views
How to restrict administrator access by source IP for any protocol on windows ?
I want to make sure that administrative access to Windows domain controllers are allowed only from specific IP addresses.
Note: I mean not only RDP access but ANY port/protocol that allows ...
0
votes
0answers
24 views
How to remotly validate an installation for a basic user?
We have 10 PC on the network and we don't have ActiveDirectory.
Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
0
votes
1answer
224 views
Windows - Fine-grained administrator permissions
Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer.
Is there any way to limit what a program can do when run as administrator.
Most ...
0
votes
0answers
38 views
Windows 7/Windows 10: Preconfigure USB network adapter
One device our users have to interact with is connected to via a generic Ethernet over USB cable. After being connected to that device, the PC needs to be configured with a specific static IP adress ...
0
votes
1answer
59 views
Possible to provide full Domain Admin rights, but disallow creation of new Admin accounts?
I would like to provide full administrative access to servers within the domain to another admin, with a single exception: the administrator should be unable to create new administrator accounts.
I ...
7
votes
1answer
14k views
Scheduled Task in Windows Server 2016, run by non-admin Users
In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps:
Scheduled Task: run under system, execute ...
1
vote
1answer
90 views
What happens to Task Scheduler if User has no permission?
I've a little question:
Lets say I have a Windows 2012 Server where I created a Scheduled Task with my Useraccount. I selected the option "Run this task even if user is not logged in" - so I don't ...
0
votes
0answers
91 views
Installer file not launching with Administrative privileges in Windows 10
I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs.
I joined them to my Domain, then logged in as the Domain ...
