full-disclosure - Re: need help in managing administrators

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <2d6724810712020729u103c24fcnbc9b9bc24e3965e7@mail.gmail.com>
Date: Sun, 2 Dec 2007 10:29:20 -0500
From: "T Biehn" <tbiehn@...il.com>
To: "happy nino" <nadtec@...mail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: need help in managing administrators

In short, this depends on the permissions needed / how the installer
determines if the user has them. The easiest thing to do is to give
local administrator access (I'm assuming Windows platform because it
sounds like it), if this is not permissible to you (as local admin
access can easily be leveraged into obtaining domain admin) then
creating a user account with the required permissions may be your best
bet, but again, any extra permissions the installer may need can
probably be used to get local administrator access, then domain
administrator access.
As you probably don't care, go ahead and look at Microsoft KB and
search around for custom user permissions (Which range from Files, to
Registry RW, to System ability to install drivers, services,
impersonate users, create users...) Of course if your installer just
looks to see if the person installing is an Administrator instead of
looking for the access, then all this trouble is for naught.

I'd be interested to know if there was something I was missing, hence the RTA.

LOLDONGS,

Travis
On Dec 2, 2007 4:42 AM, happy nino <nadtec@...mail.com> wrote:
>
>
>
>
>  Hi All,
> i've a problem in my organization that we have several domain admins, we are
> in the process of removing most of them but i need to have a person only
> authorized to install
> new software to users' computers but without having access to other parts of
> the users machines, is this possible ?..can i delegate a function like this
> only to certain users with out
> being domain admins?
> Appreciate your great help
> thanks alot
>
> regards,
> Nad
>
>
>
>
>
> ________________________________
> Get closer to the jungle. I'm a Celebrity Get Me Out Of Here!
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/