Re: Risks of Local Admin Access on Domain PC?

From: Lanwench [MVP - Exchange] (lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 02/26/03 

From: "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com>
Date: Wed, 26 Feb 2003 00:28:40 -0500

Hear, hear.

Karl Levinson [x y] mvp wrote:
> My thought exactly... except I would add that if a software vendor
> says that admin rights are necessary when all that is really needed
> is write permission to one registry key, then that vendor is way
> misinformed. That vendor should also be told that they need to amend
> their installation program and/or their user documentation so that
> the appropriate permissions are documented and are set correctly
> during installation. There's no excuse for large vendors like Intuit
> or whoever does Quickbooks to not do this correctly.
>
>
> "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]"
> <sbradcpa@pacbell.net> wrote in message
> news:3E5C130B.48CCD4D1@pacbell.net...
>> Quickbooks versions earlier than 99 - need local admin
>> Tax software programs - think they need local admin
>>
>> That's not exactly realistic in my industry...yet.
>>
>> Workaround. Log in as Administrator, go to the hklocal machine
>> registry of that software, right mouse click on it's registry entry,
>> click on permissions. Give full [admin style] permission rights to
>> the "power user" or "user" for THAT software only. Now log in as
>> the regular domain user.
>>
>> Voila.... restricted rights on the machine, full rights for a piece
>> of software that demands local admin.

Relevant Pages

  • Re: Opinions needed on Windows Administrative Rights
    ... >> CAN'T GIVE USERS ANY RIGHTS! ... Issuing local admin privs is dangerous because: ... A lot of new viruses first go after anti-viruses by stopping the process ...
    (comp.security.misc)
  • Re: Need Help to solve rights problem
    ... I would suggest rejecting the software, and having the vendor supply ... admin grants to its users. ... I install on server for central database ... > this software then they have local administrator rights on that system ...
    (microsoft.public.win2000.security)
  • Re: Risks of Local Admin Access on Domain PC?
    ... admin rights are necessary when all that is really needed is write ... permission to one registry key, then that vendor is way misinformed. ...
    (microsoft.public.security)
  • Re: Giving local Admin rights to AD 2003 Domain Admin users
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... of local admin group in the machine. ... tasks with out addin the account as a member of local admin. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Best practice post-install of sbs clients
    ... The admin rights are needed to install software, ... as a local admin on the computer. ...
    (microsoft.public.windows.server.sbs)
Quantcast