RE: RunAs
From: k levinson (levinson_k_at_yahoo.com)
Date: 06/14/05
- Previous message: k levinson: "RE: RunAs"
- Maybe in reply to: martin: "RunAs"
- Next in thread: Salvador.Manaois_at_infineon.com: "RE: RunAs"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 14 Jun 2005 08:53:07 -0700 (PDT) To: focus-ms@securityfocus.com
> -----Original Message-----
> From: gremagehan@web.de [mailto:gremagehan@web.de]
> and use this scanner. But only an user with an
admin-rights
> can use this
> scanner.
Usually this is just because of a few missing file or
registry permissions and can be fixed without the need
to grant Admin privileges. Filemon and Regmon from
www.sysinternals.com or other utilities can help you
determine what needs to change.
> I thought that I can create a kind of "weakAdmin"
which can
> only use this
> scanner (and can't install some software, remove
users .... )
> Every user can
> then use scanner (as "weakAdmin") and the
(power-)full Admin
> will be reserved
> only for me. Or do you think it can be solved with
an usergroup?
The latter. You cannot reliably create a weak Admin
account and give the user the password. My previous
suggestion about the RunAs icon, while not 100%
secure, is still a possibility.
HTH
kind regards,
Karl Levinson, CISSP
__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: k levinson: "RE: RunAs"
- Maybe in reply to: martin: "RunAs"
- Next in thread: Salvador.Manaois_at_infineon.com: "RE: RunAs"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
