RE: Admin Rights required on Terminal Services

From: Conlan Adams (conlan_at_midwesteyebanks.org)
Date: 03/17/05

  • Next message: Joseph Forbes: "Building workstation install images." 
    Date: Thu, 17 Mar 2005 12:09:48 -0500
To: <sf_mail_sbm@yahoo.com>, <security-basics@securityfocus.com>

    A few utils may help

    Filemon and regmon from sysinternals.com will show you all file and
    registry access happening on the machine. Stop all programs but the one
    you want to run, and watch and see what files/directories it accesses,
    as well as registry keys. Give access to those locations.

    If it still doesn't work you can check out handle, and listdlls or
    process explorer and double check.

    Conlan Adams

    -----Original Message-----
    From: sf_mail_sbm@yahoo.com [mailto:sf_mail_sbm@yahoo.com]
    Sent: Thursday, March 17, 2005 10:46 AM
    To: security-basics@securityfocus.com
    Subject: Admin Rights required on Terminal Services

    Dear List,

    We have an application that needs local admin rights to run

    This is a legacy application, and cannot be run as a service

    We are planning to run the application on a Terminal Services server
    (Win 2K3)

    Clients cannot run the application thru TS, since they do not have local
    admin rights

    One option is to put the users as local admins, and restrict the menus
    to which they have access through Group Policy

    Is there any other way to make users run the application without givin
    them local admin rights?

    Tried to look at "runas", but user will need to enter the administrator
    password

    Thank u all for ur help

    Ronish

  • Next message: Joseph Forbes: "Building workstation install images."

    Relevant Pages

    • RE: Admin Rights required on Terminal Services
      ... application should need admin. ... Admin Rights required on Terminal Services ... We have an application that needs local admin rights to run ...
      (Security-Basics)
    • RE: Removing Local Admin Rights...
      ... rights, install, configure and take away admin rights. ... Subject: Removing Local Admin Rights... ... > our expert instructors. ... > Attend a course taught by an expert instructor with years of ...
      (Security-Basics)
    • Re: Problems with Users Permissions
      ... giving the new user local admin rights did not grant access to the files. ... > Now the new user can get to the Office docs and edit/save/etc.. ... I think I've got a very basic problem here but I'm fairly ...
      (microsoft.public.windows.server.sbs)
    • Re: New computer added local user to have admin privs How?
      ... I operate a low IT support setup with all users having full local admin ... On the new machine without admin rights setup. ... Think I've managed to sort it by adding the domain group top local admins ...
      (microsoft.public.backoffice.smallbiz2000)
    • Re: Creating new groups
      ... them restricted admin rights, eg access to Terminal Services Manager for remote control purposes while disallowing other admin rights. ... the only valid approach would be: use a blank user profile and assign it permissions it needs to fulfill it's tasks. ... I must admit that I'm not a Terminal Services guy so for the Terminal Services Manager I don't have a solution right-away. ...
      (microsoft.public.windows.server.active_directory)