Re: Power Users, AntiSpyware & CriticalUpdates

From: Ansgar -59cobalt- Wiechers (bugtraq_at_planetcobalt.net)
Date: 09/07/05

  • Next message: iredden_at_gmail.com: "University Degree or CISSP" 
    Date: Wed, 7 Sep 2005 13:58:18 +0200
To: security-basics@securityfocus.com

    On 2005-09-06 David Glosser wrote:
    >> Power users are not really an improvement, as they still have far too
    >> many privileges to achieve actual security. Make your users normal
    >> users if possible. Otherwise don't bother. Making them power users
    >> isn't worth the time you'll spend on it.
    >
    > If you have an app which doesn't work as a regular user, you can run
    > utilities (I believe "regmon" and "filemon") to see what directories
    > and registry entries need to be opened up.

    Yes. I should have mentioned that. If anyone is interested: I have a
    (very basic) HOWTO about this stuff on my homepage [1].

    [1] http://www.planetcobalt.net/sdb/submission.shtml

    Regards
    Ansgar Wiechers 

    -- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668
  • Next message: iredden_at_gmail.com: "University Degree or CISSP"

    Relevant Pages

    • Re: Power Users Lacking Privileges
      ... I don't know what specific privileges the app Quick Books require. ... My predecessor set up a Win2003 SBS server for my ... Give all users authenticated to the domain as Power Users the ...
      (microsoft.public.windows.server.active_directory)
    • Re: Power Users, AntiSpyware & CriticalUpdates
      ... If you can wait a day or two before deploying updates, ... Wait until day after patch tuesday. ... or two before you install an critical security patch. ... > Like don't make your users admins or power users and have them use a web ...
      (Security-Basics)
    • Re: Why Users dont have write rights to the %windir%TEMP folder
      ... The number of "power users" of any type can be counted on the ... folder and I will like to see if it is acceptable in terms of security. ... That's not the correct location for temporary files, ... rather than on every workstation. ...
      (microsoft.public.windows.server.security)
    • Re: XP Home and Adding and Editing Local Groups
      ... > I know there is a way to add new Local Groups in XP Home ... > through the NET LOCALGROUP command, but is there a way to ... > For example, could a group, perhaps "Power Users for XP Home," ... > be created and then given privileges and granted access similar ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Users vs. Power Users
      ... so canNOT harm the system anyway nor harm any other user's data unless ... also launch REGEDT32 to look at the permissions on ... >> security auditing and cannot find any failed object access ... >> I'm trying to look at differences in users / power users ...
      (microsoft.public.win2000.security)