lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Sun, 2 Dec 2007 10:29:20 -0500 From: "T Biehn" <tbiehn@...il.com> To: "happy nino" <nadtec@...mail.com> Cc: full-disclosure@...ts.grok.org.uk Subject: Re: need help in managing administrators In short, this depends on the permissions needed / how the installer determines if the user has them. The easiest thing to do is to give local administrator access (I'm assuming Windows platform because it sounds like it), if this is not permissible to you (as local admin access can easily be leveraged into obtaining domain admin) then creating a user account with the required permissions may be your best bet, but again, any extra permissions the installer may need can probably be used to get local administrator access, then domain administrator access. As you probably don't care, go ahead and look at Microsoft KB and search around for custom user permissions (Which range from Files, to Registry RW, to System ability to install drivers, services, impersonate users, create users...) Of course if your installer just looks to see if the person installing is an Administrator instead of looking for the access, then all this trouble is for naught. I'd be interested to know if there was something I was missing, hence the RTA. LOLDONGS, Travis On Dec 2, 2007 4:42 AM, happy nino <nadtec@...mail.com> wrote: > > > > > Hi All, > i've a problem in my organization that we have several domain admins, we are > in the process of removing most of them but i need to have a person only > authorized to install > new software to users' computers but without having access to other parts of > the users machines, is this possible ?..can i delegate a function like this > only to certain users with out > being domain admins? > Appreciate your great help > thanks alot > > regards, > Nad > > > > > > ________________________________ > Get closer to the jungle. I'm a Celebrity Get Me Out Of Here! > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists