Re: What permissions do I need to use admin$ ?

From: Kerry Brown (kerry_at_kdbNOSPAMsys-tems.c*a*m)
Date: 11/29/05 

Date: Tue, 29 Nov 2005 09:03:57 -0800

Maury Markowitz wrote:
> "Kerry Brown" wrote:
>
>> If in a domain you need domain admin permissions. If in a workgroup
>> then you must be a administrator on that machine.
>
> It is on a domain, I am a domain admin of another domain. I am
> attempting to add rights for those domain admins to have access to
> admin$.
>
>> Why would you want to mount admin$?
>
> PsExec requires access to admin$. I'm not so much trying to mount it
> as figure out why PsExec always gives me "access is denied". using
> net use admin$ also gives me "access is denied". The two are almost
> certainly caused by the same problem.
>
> Maury

You may need to specify an account that will work with the -u and -p
switches. See the following link for usage and axamples.

http://www.windowsitpro.com/Windows/Article/ArticleID/42919/42919.html

Alternatively you could logon as a domain admin in the same domain as the
server. Another method would be to logon as an Enterprise Admin. Obviously
running a program as an Enterprise Admin is a security risk that should be
avoided if at all possible. What are you trying to accomplish with psexec?

Kerry

Relevant Pages

  • RE: software to control domain administrators
    ... these so-called controls on the admin. ... what would you do when you need that level of control. ... admin changed the domain admin password when he or she found out that they ... software to control domain administrators ...
    (Security-Basics)
  • Re: Finding a Hacker
    ... compromising the loca or domain admin acocunts, or by elevation, ... to get local admin rights on the machine used by the domain admin, ... If the hacker did get in remotely using an administrator account on ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security Filtering does not work correctly in GPO
    ... administrator object for this GPO. ... I deleted the domain admin profile on the ... where the domain admin was logged on. ... I will now keep track on it, if the administrator receices the settings again. ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to make a user local admin in domain?
    ... > normal user a domain admin in order to give him just local admin??? ... >> Actually, so long as the Dom Admin has previously logged on before, ... Dom Admins are a member of local admins by default. ...
    (microsoft.public.win2000.security)
  • Re: Any chance to differ local group or domain group from windowsIdentity groups?
    ... So you want to check if a user is domain admin - not local admin? ... When a user belongs to local admin, but not domain admin group, can I ... admin group(the builtin administrators group in a domain). ...
    (microsoft.public.dotnet.security)