Questions tagged [administrative-privileges]

Filter by
Sorted by
Tagged with
7
votes
0answers
7k views

Scheduled Task in Windows Server 2016, run by non-admin Users

In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps: Scheduled Task: run under system, execute ...
3
votes
1answer
71 views

Can I grant “Virtual Disk Service” to a non-local administrator?

Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation: SQL Clone Agent requirements An agent should be installed on the same machine as any SQL Server ...
2
votes
1answer
66 views

How to make a service (or the system process) impersonate the *elevated* variant of a user account?

In my network, there is a Windows 2008 R2 server with network name Dax. On that server, I have (among others, of course): a hard disk drive, mounted as E:\ a folder E:\odo an SMB share \\Dax\odo ...
2
votes
1answer
22 views

Dialogs still ask for user password (instead of root's) after adding rootpw to sudoers file

To add an extra layer of security I'm using the rootpw option in the sudoers file and while it works perfectly fine from the shell, when a specific command invokes the GUI version of "elevation", only ...
2
votes
1answer
120 views

Windows 2008R2 RDP only works for Standard User but not for an Admin User

I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the ...
1
vote
1answer
67 views

What happens to Task Scheduler if User has no permission?

I've a little question: Lets say I have a Windows 2012 Server where I created a Scheduled Task with my Useraccount. I selected the option "Run this task even if user is not logged in" - so I don't ...
1
vote
1answer
309 views

Specific dhcp administration across multiple dhcp servers

Currently we have multiple DCs in our primary site and a remote location which has its own DC. All of those DCs are on the same domain, though. The remote IT team wants to be able to manage their ...
1
vote
0answers
84 views

How to restrict administrator access by source IP for any protocol on windows ?

I want to make sure that administrative access to Windows domain controllers are allowed only from specific IP addresses. Note: I mean not only RDP access but ANY port/protocol that allows ...
0
votes
2answers
196 views

How to prevent users from installing software on Windows 2016 on Azure?

I have an application server running Remote Desktop Session Host (RDSH) on Windows Server 2016 in an isolated Azure cloud environment and would like to prevent the users (who login via RDP) from being ...
0
votes
1answer
137 views

Linux root using domain users kerberos tickets

We’ve just migrated a set of Centos6/7 hosts from pure OpenLDAP based authentication to IPA and Kerberos. What surprised us is that a local root user on an IPA enrolled host can use ‘su’ to become an ...
0
votes
1answer
160 views

Accessing Local Directory via UNC Prompts for Credentials

We have a Windows 2016 server with the hostname, foo.example.com. When logged into it as a Domain Admin, if we enter itself as a UNC path in Windows Explorer... \\foo.example.com\d$ ...we can ...
0
votes
1answer
132 views

Administrators lost access to network drive and remote desktop Windows Server 2008 [duplicate]

Three days ago, all the users with administrator role could not connect to our server (Windows Server 2008 R2) via network drive or remote desktop, while general users could apply these functions as ...
0
votes
1answer
197 views

Windows - Fine-grained administrator permissions

Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer. Is there any way to limit what a program can do when run as administrator. Most ...
0
votes
0answers
18 views

Run cmd command as admin through the pipe

I find myself in a bit of a weird situation and I'm hoping someone would be able to advise for me. I have a tool, RMM datto, which allows myself to run commands to all machines on the domain. I'm ...
0
votes
1answer
24 views

How to re-apply original inherited permissions to files created while being administrator?

I hope someone can answer this once and for all, this is driving me mad for months now. Platform: Windows Server, any version. This problem doesn't happen on a workstation. Problem: In a folder, ...
0
votes
1answer
38 views

Global Administrator / disable having access to the email “open another mailbox…”

I am global admin on a domain and as the name implies, I have access to all emails and having access to their emails via "open another mailbox..." in exchange. Now, one thing I noticed is that I am ...
0
votes
1answer
21 views

Allowing non admin user to run a specific software updater without admin password

I need to allow a non-admin network user to run a specific exe as local administrator on Windows 7. Basically what I need is not to be prompted for admin credentials when I run that specific exe which ...
0
votes
1answer
109 views

Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016

I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page: -- Reset passwords in a particular Org Unit -- Create ...
0
votes
0answers
24 views

How to remotly validate an installation for a basic user?

We have 10 PC on the network and we don't have ActiveDirectory. Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
0
votes
0answers
36 views

Windows 7/Windows 10: Preconfigure USB network adapter

One device our users have to interact with is connected to via a generic Ethernet over USB cable. After being connected to that device, the PC needs to be configured with a specific static IP adress ...
0
votes
1answer
58 views

Possible to provide full Domain Admin rights, but disallow creation of new Admin accounts?

I would like to provide full administrative access to servers within the domain to another admin, with a single exception: the administrator should be unable to create new administrator accounts. I ...
0
votes
0answers
62 views

Installer file not launching with Administrative privileges in Windows 10

I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs. I joined them to my Domain, then logged in as the Domain ...