Re: Executing app with admin privileges

Hi David,

Dixon, Wayne wrote:
Additionally, you can set the properties of the program to always
"RunAs", then all the user would have to do is enter in the proper
password....
Sure giving users the admin password is not a good idea but if they become a local administrator ie local to their box, what damage can they do to the domain as they only have full control over their box. I thinking along the lines that a there are different types of admins in the AD structure so perhaps giving a user admin priveleges on a read only link is fine as they will not have sufficient admin privileges to edit anything outside of their box? Of course auditing would need to be stepped up to monitor for 'admins' nefarious activities with a strict warning of 'you will be fired if you admin outside of your box, even unknowingly'.
--
========================================================================
Currently using SuSE 9.2 Professional with KDE and Mozilla 1.7.2
Linux user # 229959 at http://counter.li.org
========================================================================


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: Executing app with admin privileges
    ... just a particular application with admin credentials while the rest run ... Use any one of the "elevate my privileges during this software run ... Norwich University ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has ...
    (Security-Basics)
  • RE: Segregation of duties trivia
    ... live data or security configurations (Sec Admin) that go ... Or a security administrator can be a Help Desk support ... Norwich University ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
    (Security-Basics)
  • RE: RE: How to stop Admins from sniffing ?
    ... with your machine and/or network connection and you're just going to ... You cannot prevent the admin of a computer from being able to intercept ... Norwich University ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has ...
    (Security-Basics)
  • RE: Rights
    ... Subject: Rights ... I don't allow admin rights at all. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic ...
    (Security-Basics)
  • Re: Username Discovery
    ... You can user Microsoft Baseline Security Analyser, it checks list of admin users on the box, and checks for weak passwords ... MBSA requires admin rights on the machine it scans though, if your machines are on a AD Domain, you can run the tool as a Domain Admin ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
    (Security-Basics)