Re: Always admin rights for only one exec???

From: Matze (MatzeGuentert_at_gmx.de)
Date: 09/15/03

  • Next message: David Gillett: "RE: arpwatch" 
    To: <simont@pop.co.za>, <security-basics@securityfocus.com>
Date: Mon, 15 Sep 2003 13:58:33 +0200

    Thx for your support. I wrote a lil' batch file wich runs 'runas' and
    everything is fine :)

    Sincerely

    Matthias Güntert

    ----- Original Message -----
    From: "Simon Taplin" <simont@pop.co.za>
    To: "Matthias Güntert" <MatzeGuentert@gmx.de>;
    <security-basics@securityfocus.com>
    Sent: Saturday, September 13, 2003 11:54 AM
    Subject: RE: Always admin rights for only one exec???

    > Have a look at the runas command in Win2K. Works fine from the command
    line,
    > i haven't tried using it from within the normal GUI.
    >
    > Simon
    >
    >
    > Quote for the day:
    > Systems Administration is the kind of job that nobody notices if you're
    > doing it well. People only notice when their systems are not working.
    >
    > -----Original Message-----
    > From: Matthias Güntert [mailto:MatzeGuentert@gmx.de]
    > Sent: 10 September 2003 06:02
    > To: security-basics@securityfocus.com
    > Subject: Always admin rights for only one exec???
    >
    >
    > Hello list
    >
    > I have just set up my new w2k workstation. I have added a second user
    > with which i will work under normal cirumstances.
    > Now some programms dont work any more. For example active ports, which
    > shows me which programm uses which
    > Port. I have tried to give the mainuser (!admin) all rights on that
    > folder and it's files. I have also given full access
    > To registry tree via regedt32, but it still wont work. If i right click
    > on the executable as mainuser and then choose execute as....and enter
    > the pass for admin it works fine. How am i able to give always
    > adminrights to this prog. I am not sure but i think i heard from a tool
    > which is able to perform this task. Any hints on this??
    >
    > Sincerely
    >
    > Matthias Güntert
    >
    > ---
    > This email is hopefully virus free as it has been
    > Checked by AVG anti-virus system (http://www.grisoft.com).
    > Version: 6.0.515 / Virus Database: 313 - Release Date: 2003/09/01
    >

    ---------------------------------------------------------------------------
    Captus Networks
    Are you prepared for the next Sobig & Blaster?
     - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
     - Precisely Define and Implement Network Security
     - Automatically Control P2P, IM and Spam Traffic
    FIND OUT NOW - FREE Vulnerability Assessment Toolkit
    http://www.captusnetworks.com/ads/42.htm
    ----------------------------------------------------------------------------

  • Next message: David Gillett: "RE: arpwatch"

    Relevant Pages

    • Re: Safe practices
      ... Linux wins in this respect by the simple expedient of making root access ... access, it's still possible to gain admin rights as long as there is a program that has been started with full admin rights, this due a bad way communication between applications and explorer (the window manager). ... As long as port forwards aren't enabled to the machine, there are cases where people has managed to forward every port to the machine behind the router, they not noticed the error as they only have one machine. ...
      (alt.os.linux)
    • Re: Problem with script to add printers ports, need help.
      ... I checked the WMI reference. ... probably not the way to create a port. ... > with my domain account that has admin rights. ... >> Jim Vierra ...
      (microsoft.public.windows.server.scripting)
    • Re: Opening a Port
      ... I thought that if a port is closed, ... The admin of the FW did a port forwarding of a port or ports it or them to unsolicited inbound traffic from the Internet, such as a WEB server sitting there listing for unsolicited inbound traffic from client machines with an browser on port 80, as an example. ... That would mean something behind the FW, a program running on a computer, was sitting there listing on its port or ports for unsolicited inbound traffic from the Internet. ... Admin rights on a machine or a Domain has nothing to do with it that I know about. ...
      (comp.security.firewalls)
    • Re: W2K Srv lost admin
      ... GUESS) is there is a FW that is blocking the high rpc port connection. ... The FTP passwords would not be ... accepted until they were given admin rights. ... admin password on one task then the others would restart. ...
      (microsoft.public.windows.server.active_directory)