RE: Admin Rights required on Terminal Services

From: Andrew Shore (andrew.shore_at_holistecs.com)
Date: 03/18/05

  • Next message: Atom Smasher: "choice-point screw-up and secure hashes" 
    Date: Fri, 18 Mar 2005 10:34:31 -0000
To: <sf_mail_sbm@yahoo.com>, <security-basics@securityfocus.com>

    Have you tried running the NTCOMPAT security policy rather than giving
    users elevated right.

    Admin privilege on a terminal server is asking for trouble.

    Andy

    -----Original Message-----
    From: sf_mail_sbm@yahoo.com [mailto:sf_mail_sbm@yahoo.com]
    Sent: 17 March 2005 15:46
    To: security-basics@securityfocus.com
    Subject: Admin Rights required on Terminal Services

    Dear List,

    We have an application that needs local admin rights to run

    This is a legacy application, and cannot be run as a service

    We are planning to run the application on a Terminal Services server
    (Win 2K3)

    Clients cannot run the application thru TS, since they do not have local
    admin rights

    One option is to put the users as local admins, and restrict the menus
    to which they have access through Group Policy

    Is there any other way to make users run the application without givin
    them local admin rights?

    Tried to look at "runas", but user will need to enter the administrator
    password

    Thank u all for ur help

    Ronish

  • Next message: Atom Smasher: "choice-point screw-up and secure hashes"

    Relevant Pages

    • Re: Permissions (EVERYONE POST TO THIS)
      ... Removing Admin rights from your users is the prudent thing to do. ... without the IT Administrator providing these services and applications. ... priveledes, and before you know it, you have lost control of your network. ...
      (microsoft.public.win2000.security)
    • Re: Software Audit & Enforcement - Required?
      ... domain admin password. ... Who then has access to the Admin rights on the companies ... The local admin account on each laptop is disabled by default, ... You prevent people from installing software by removing them from ...
      (microsoft.public.security)
    • Re: Running programs for non-previleged users on XP
      ... insist a user be able to use an application without having Admin rights. ... on running the software under the Local Admin context. ... >> The administrator group user finishes installing the program. ...
      (microsoft.public.win2000.security)
    • Re: XP & W2K server User rights need help
      ... accounts. ... This narrows the issue, since any admin ... > Here is another fact, this domain server had to be> replaced so a new one was created, in the old domain> server non of the users had accounts only the computers ... >>> Accounts in AD Power users with admin rights to local ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Administrators Permission on Network
      ... >network administrators, but all i did was set up ... That bank needs a new admin. ... >>they'd never have given you local admin rights to begin ...
      (microsoft.public.security)