Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [administrative-privileges]

39 questions
0
votes
1 answer

Linux root using domain users kerberos tickets

We’ve just migrated a set of Centos6/7 hosts from pure OpenLDAP based authentication to IPA and Kerberos. What surprised us is that a local root user on an IPA enrolled host can use ‘su’ to become an IPA user. If the chosen IPA user is currently…
Fenster34
  • 173
  • 6
0
votes
2 answers

How to prevent users from installing software on Windows 2016 on Azure?

I have an application server running Remote Desktop Session Host (RDSH) on Windows Server 2016 in an isolated Azure cloud environment and would like to prevent the users (who login via RDP) from being able to install software on a whim. How to best…
ShieldOfSalvation
  • 251
  • 5
  • 14
0
votes
1 answer

Accessing Local Directory via UNC Prompts for Credentials

We have a Windows 2016 server with the hostname, foo.example.com. When logged into it as a Domain Admin, if we enter itself as a UNC path in Windows Explorer... \\foo.example.com\d$ ...we can access it. Same if we use localhost or it's IP.…
amoreno
  • 83
  • 2
  • 7
0
votes
1 answer

Administrators lost access to network drive and remote desktop Windows Server 2008

Three days ago, all the users with administrator role could not connect to our server (Windows Server 2008 R2) via network drive or remote desktop, while general users could apply these functions as usual. The administrators can still log in at the…
Terpsiphone
  • 11
  • 4
0
votes
1 answer

Granting OU-limited read AND write admin privileges to On-Premises Exchange Server 2016

I've successfully created a limited Management role, and assigned a user to it, that allows a junior admin only two things via the ECP web page: -- Reset passwords in a particular Org Unit -- Create new users in the same The write privileges are no…
BaseZen
  • 384
  • 2
  • 14
0
votes
0 answers

How to remotly validate an installation for a basic user?

We have 10 PC on the network and we don't have ActiveDirectory. Actually, every time than a user (they aren't admin on their computer) want to install a software, I use TeamViewer to access the computer and install the application manually with the…
Efefu
  • 1
0
votes
1 answer

Windows - Fine-grained administrator permissions

Whenever the Windows UAC pop-up shows up to grant a program administrator rights there is just a Yes/No answer. Is there any way to limit what a program can do when run as administrator. Most programs do not need all priviledges, but just a little…
Lazarus535
  • 215
  • 1
  • 4
0
votes
0 answers

Windows 7/Windows 10: Preconfigure USB network adapter

One device our users have to interact with is connected to via a generic Ethernet over USB cable. After being connected to that device, the PC needs to be configured with a specific static IP adress on that virtual adapter for communication to work…
jmr
  • 101
  • 1
0
votes
1 answer

Possible to provide full Domain Admin rights, but disallow creation of new Admin accounts?

I would like to provide full administrative access to servers within the domain to another admin, with a single exception: the administrator should be unable to create new administrator accounts. I have looked at the options available through…
toolshed
  • 227
  • 4
  • 15
0
votes
0 answers

Installer file not launching with Administrative privileges in Windows 10

I just performed two brand new (clean) installs of Windows 10 Pro (v1709 - latest release, with all Windows Updates) on two different PCs. I joined them to my Domain, then logged in as the Domain administrator and began to install programs. On one…
Daniel
  • 1,594
  • 8
  • 26
  • 44
0
votes
1 answer

What permissions would I need to give a developer for a Wordpress website?

I am hiring a web developer to create a theme and administer my plugins. I need new plugins but I also need them to run reports from my plugins. I'm new to this so I want to know what permissions they would need to build the theme, fix problems with…
Kuromeru Panthar
  • 3
  • 1
0
votes
2 answers

Run a PowerShell script once on all computers as admin via GPO without changing execution policy

I have a PowerShell script that I need to run once on all computers in my Active Directory domain. A large number of computers are off at any given time, so a GPO would allow us to ensure that it applies to all affected machines. However, the script…
CMS
  • 11
  • 1
0
votes
1 answer

Alert when Admin logs into Azure

I setup an Office365/Azure tenancy for a small charity I help. I am keen to setup automated reporting that sends an email when someone logs in as an admin account (i.e with a particular role or group). The main things I am trying to achieve…
Dels
  • 1
0
votes
1 answer

How does Windows establish whether application makes changes to device

For applications that trigger the UAC ("Do you want to allow this app to make changes to your device" dialog), which are the characteristics that are detected by Windows in order to decide to trigger UAC? Consider that "Run this program as an…
matpop
  • 300
  • 2
  • 7
0
votes
0 answers

add local users to GPP managed groups

I (hopefully:) understand the usage of GPP management of restricted groups. I do it with Item-Level targetting but have one problem which I have no clue why it is not working. When using Local Group Member dialog box I can link any domain user I…
Juliusz Wysocki
  • 1
  • 1
1
2
3