RE: Executing app with admin privileges

There's a couple of ways:

1. Easiest is to use Windows' RunAs feature, which allows you to run
just a particular application with admin credentials while the rest run
in the normal user context.
2. Use any one of the "elevate my privileges during this software run
only" third party tools.
3. Figure out why it needs admin privileges (i.e. what NTFS, share, and
registry permissions, and what user rights) and give normal users the
necessary rights.
4. Run that application in a local virtual machine.

There are other ways, but this is a quick summary.

Roger

*****************************************************************
*Roger A. Grimes, InfoWorld, Security Columnist
*CPA, CISSP, MCSE: Security (2000/2003/MVP), CEH, yada...yada...
*email: roger_grimes@xxxxxxxxxxxxx or roger@xxxxxxxxxxxxxx
*Author of Professional Windows Desktop and Server Hardening (Wrox)
*http://www.amazon.com/gp/product/0764599909
*****************************************************************



-----Original Message-----
From: Dummy cerberus [mailto:dummycerberus@xxxxxxxxx]
Sent: Thursday, July 20, 2006 4:56 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Executing app with admin privileges

Hello everyone,

I have come across with the following problem:

I work at the systems department, and we MUST host every stupid
application that is developed all over the organisation... most of the
times with no common criteria at all, neither with common sense.

Now, we have to install a client/server application, and it has been
developed in such a way, that the user who executes the client side, has
to have "local admin/advanced user" privileges on the desktop where he
is executing it...

There's no way to modify that application, so I wonder whether or not
there is a tool that could allow me to configure the system in such a
way that all the users could execute that application, without giving
them "local admin/advanced user" privileges for the whole system (only
for that stupid application).

I wonder if there's a way to acomplish that wether with AD policies or
third party tools (better if free ;-)

Thanks in advance, and best regards

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: Executing app with admin privileges
    ... Executing app with admin privileges ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • RE: Checking for Malw
    ... privileges for them to do what they need to do. ... get rid of all those ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • RE: Executing app with admin privileges
    ... admin privileges, but locked down using the toolkit. ... them "local admin/advanced user" privileges for the whole system (only ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
    (Security-Basics)
  • RE: Segregation of duties trivia
    ... live data or security configurations (Sec Admin) that go ... Or a security administrator can be a Help Desk support ... Norwich University ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
    (Security-Basics)
  • RE: RE: How to stop Admins from sniffing ?
    ... with your machine and/or network connection and you're just going to ... You cannot prevent the admin of a computer from being able to intercept ... Norwich University ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has ...
    (Security-Basics)
Loading