Questions tagged [administrative-privileges]
The administrative-privileges tag has no usage guidance.
42
questions
9
votes
1
answer
23k
views
Scheduled Task in Windows Server 2016, run by non-admin Users
In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps:
Scheduled Task: run under system, execute ...
- 91
4
votes
5
answers
6k
views
How can root start a process that only root can kill?
It is easy to start a process at background or make it as systemd service.
However, if I want to start a process that monitors activities on the Linux machine, it fells to the target of attacks. If ...
- 540
3
votes
3
answers
2k
views
User directory does not exist when logging in via ssh to a Synology NAS
On a Synology NAS with DSM 7.0 I have created through the Graphical UI a dedicated admin user (as recommended in Synology's setup procedure), then I have enabled ssh login and now I can ssh into the ...
- 143
3
votes
1
answer
204
views
Can I grant "Virtual Disk Service" to a non-local administrator?
Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation:
SQL Clone Agent requirements
An agent should be installed on the same machine as any SQL Server ...
- 185
2
votes
1
answer
2k
views
Can i update the windows registry entries for HKEY_CURRENT_USER values without elevated privileges?
Links such as the following suggest that I should be able to edit the registry without elevated privileges, as long as I only update HKEY_CURRENT_USER.
https://blog.codeinside.eu/2015/08/11/reg-exe-or-...
- 143
2
votes
1
answer
453
views
How to make a service (or the system process) impersonate the *elevated* variant of a user account?
In my network, there is a Windows 2008 R2 server with network name Dax. On that server, I have (among others, of course):
a hard disk drive, mounted as E:\
a folder E:\odo
an SMB share \\Dax\odo ...
- 578
2
votes
1
answer
139
views
Dialogs still ask for user password (instead of root's) after adding rootpw to sudoers file
To add an extra layer of security I'm using the rootpw option in the sudoers file and while it works perfectly fine from the shell, when a specific command invokes the GUI version of "elevation", only ...
- 31
2
votes
1
answer
354
views
Windows 2008R2 RDP only works for Standard User but not for an Admin User
I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the ...
- 123
1
vote
1
answer
85
views
RHEL 8: Administrator vs. Auditor role
On RHEL 8, are there prepared functions, methods, processes or tools to implement administrator/operator and auditor roles in the following way:
An administrator/operator should be able to do almost ...
- 636
1
vote
1
answer
53
views
Hiring a contractor to migrate databases and websites. What kind of security plan should I put in place to mitigate risks?
We have a physical machine serving databases and websites. We want to contract a consultant for this planned migration from the older physical Windows machine to an up to date brand new Virtual ...
- 407
1
vote
1
answer
236
views
What happens to Task Scheduler if User has no permission?
I've a little question:
Lets say I have a Windows 2012 Server where I created a Scheduled Task with my Useraccount. I selected the option "Run this task even if user is not logged in" - so I don't ...
- 113
1
vote
1
answer
2k
views
How can I interact with a new Postgres installation if I can't sudo -u postgres?
I have installed Postgres on an Ubuntu 16.04 server, but I'm working in a corporate environment and am not able to sudo -u postgres (I have sudo rights, but can't impersonate another user).
Is there ...
- 111
1
vote
1
answer
187
views
Allowing non admin user to run a specific software updater without admin password
I need to allow a non-admin network user to run a specific exe as local administrator on Windows 7. Basically what I need is not to be prompted for admin credentials when I run that specific exe which ...
1
vote
1
answer
1k
views
Specific dhcp administration across multiple dhcp servers
Currently we have multiple DCs in our primary site and a remote location which has its own DC. All of those DCs are on the same domain, though.
The remote IT team wants to be able to manage their ...
- 21
1
vote
0
answers
956
views
How to restrict administrator access by source IP for any protocol on windows ?
I want to make sure that administrative access to Windows domain controllers are allowed only from specific IP addresses.
Note: I mean not only RDP access but ANY port/protocol that allows ...
- 11
0
votes
2
answers
26k
views
Run a PowerShell script once on all computers as admin via GPO without changing execution policy
I have a PowerShell script that I need to run once on all computers in my Active Directory domain. A large number of computers are off at any given time, so a GPO would allow us to ensure that it ...
- 11
0
votes
1
answer
120
views
How does Windows establish whether application makes changes to device
For applications that trigger the UAC ("Do you want to allow this app to make changes to your device" dialog), which are the characteristics that are detected by Windows in order to decide ...
- 350
0
votes
3
answers
429
views
Granting full global domain admin rights to license reseller?
We are buying Microsoft 365 licenses and the reseller is requesting full global domain admin rights in order to administer the licenses.
I'm thinking, "no way in Hello Kitty", but maybe I'm ...
- 274
0
votes
1
answer
1k
views
Linux root using domain users kerberos tickets
We’ve just migrated a set of Centos6/7 hosts from pure OpenLDAP based authentication to IPA and Kerberos. What surprised us is that a local root user on an IPA enrolled host can use ‘su’ to become an ...
- 173
0
votes
2
answers
2k
views
How to prevent users from installing software on Windows 2016 on Azure?
I have an application server running Remote Desktop Session Host (RDSH) on Windows Server 2016 in an isolated Azure cloud environment and would like to prevent the users (who login via RDP) from being ...
0
votes
1
answer
155
views
What permissions would I need to give a developer for a Wordpress website?
I am hiring a web developer to create a theme and administer my plugins. I need new plugins but I also need them to run reports from my plugins.
I'm new to this so I want to know what permissions they ...
0
votes
2
answers
851
views
Windows 11 home/ Win 10 Pro. How to prevent standard users from installing software? [closed]
It seems that I cannot prevent a standard account from installing software. I tried that on windows 10 Pro and on Windows 11 home. I have a problem similar to this here. But the admin popup did not ...
- 127
0
votes
1
answer
1k
views
Running Powershell scripts pushed from AD GPO as admin on domain computers
Needed some help getting a simple task done at work.
I have about 30 machines in my work domain that i want to run a power-shell script on at startup.
I have created a GPO that runs the script on all ...
- 1
0
votes
1
answer
1k
views
Accessing Local Directory via UNC Prompts for Credentials
We have a Windows 2016 server with the hostname, foo.example.com.
When logged into it as a Domain Admin, if we enter itself as a UNC path in Windows Explorer...
\\foo.example.com\d$
...we can ...
- 83
0
votes
1
answer
203
views
Administrators lost access to network drive and remote desktop Windows Server 2008 [duplicate]
Three days ago, all the users with administrator role could not connect to our server (Windows Server 2008 R2) via network drive or remote desktop, while general users could apply these functions as ...
- 11
0
votes
1
answer
293
views
Windows - Fine-grained administrator permissions
Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer.
Is there any way to limit what a program can do when run as administrator.
Most ...
- 235
0
votes
0
answers
61
views
Domain-joined clients local Administrators group lost Domain Admins member: recovery possible?
On a number of Windows 10 clients joined to a Windows Server 2022 domain and after some serious GPO-related mishandling, the local administrators group contains only the (inactive) administrator. Is ...
- 153
0
votes
1
answer
53
views
How to detect when someone customizes a managed PC?
As we have moved to Intune, we have "managed" nearly everything. Making Intune the only local administrator needed on most of our PCs.
Reaching the edges of this policy, I would like to make ...
- 1,670
0
votes
0
answers
347
views
How to create a non-admin user in OpenBSD to be able to login as a root like in Linux-based systems?
Usually, in Linux-based systems I create new user without admin rights (sudo group).
I'm able to login as that user via SSH and then, when I need admin rights, I can just,
$ su root
...entering pwd...
...
0
votes
0
answers
17
views
Unable to create a GCP machine due to access rights
I have multiple GCP servers and am trying to build a new one based on cpanel with ubuntu. Now whenever I try and create it tells me I'm unable to build and try giving access rights to my account.
I've ...
google-cloud-platform
0
votes
1
answer
250
views
Alert when Admin logs into Azure
I setup an Office365/Azure tenancy for a small charity I help.
I am keen to setup automated reporting that sends an email when someone logs in as an admin account (i.e with a particular role or group)....
- 1
0
votes
0
answers
65
views
add local users to GPP managed groups
I (hopefully:) understand the usage of GPP management of restricted groups. I do it with Item-Level targetting but have one problem which I have no clue why it is not working.
When using Local Group ...
0
votes
0
answers
81
views
EXCHANGE and MAPI : domain admins not allowed
I can't configure Outlook 2013 with Exchange 2016 as domain admin, it asks me for password, i nter it and reask as well.
No problem with users, only with Administrators (Builtin, domain admins...)
Is ...
- 155
0
votes
1
answer
2k
views
running batch file as administrator privilege in clients with gpo(scripts/logon)
I want to run a batch file on all my domain clients via gpo(scripts/logon), but the problem is that to run a batch file, administrator privilege is required.
I wanted to know is there any command or ...
0
votes
0
answers
142
views
Run cmd command as admin through the pipe
I find myself in a bit of a weird situation and I'm hoping someone would be able to advise for me.
I have a tool, RMM datto, which allows myself to run commands to all machines on the domain. I'm ...
- 135
0
votes
2
answers
863
views
How to re-apply original inherited permissions to files created while being administrator?
I hope someone can answer this once and for all, this is driving me mad for months now.
Platform:
Windows Server, any version. This problem doesn't happen on a workstation.
Problem:
In a folder, ...
- 123
0
votes
1
answer
613
views
Global Administrator / disable having access to the email "open another mailbox..."
I am global admin on a domain and as the name implies, I have access to all emails and having access to their emails via "open another mailbox..." in exchange.
Now, one thing I noticed is that I am ...
- 3
0
votes
1
answer
338
views
Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016
I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page:
-- Reset passwords in a particular Org Unit
-- Create ...
- 396
0
votes
0
answers
29
views
How to remotly validate an installation for a basic user?
We have 10 PC on the network and we don't have ActiveDirectory.
Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the ...
- 1
0
votes
0
answers
45
views
Windows 7/Windows 10: Preconfigure USB network adapter
One device our users have to interact with is connected to via a generic Ethernet over USB cable. After being connected to that device, the PC needs to be configured with a specific static IP adress ...
- 101
0
votes
1
answer
67
views
Possible to provide full Domain Admin rights, but disallow creation of new Admin accounts?
I would like to provide full administrative access to servers within the domain to another admin, with a single exception: the administrator should be unable to create new administrator accounts.
I ...
- 237
0
votes
0
answers
169
views
Installer file not launching with Administrative privileges in Windows 10
I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs.
I joined them to my Domain, then logged in as the Domain ...
- 1,614