Questions tagged [user-permissions]

414 questions
8
votes
2 answers

How do large companies handle software updates for users without administrative rights?

I just started working for a small-medium size company doing IT support. Maybe 150 or less users. Right now every user has administrative rights to their own machine. This allows them to install updates or whatever else they would like to. I'm…
CT.
  • 731
  • 2
  • 8
  • 20
7
votes
4 answers

How can I chown a file to a subuid without sudo

Basically, What is going on here and what am I not understanding? I have a set of subuids for my user. I want to chown a file to specific subuid which is part of this user's allocation administrator@host:/home/administrator$ cat…
TechnicalChaos
  • 133
  • 1
  • 8
7
votes
2 answers

Granting service control manager access permission to user outside of administrator group

I have a user outside of administrator group. How can I grant service control manager access permission for that (specific) user? It's like SC_MANAGER_ALL_ACCESS from the following…
Nati
  • 71
  • 1
  • 1
  • 2
7
votes
4 answers

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?

How to allow a user in Nagios to view the status of some servers, but not disable/enable anything?
Kazimieras Aliulis
  • 2,324
  • 2
  • 26
  • 45
6
votes
1 answer

Rsync - Setting up rsync user and their permissions

I will be setting rsync between two webserver. I am aiming to have backup of data from my primary server on the secoundary in case if primary server crashes. My question relates to setting up on primary server a user account for rsync purposes.…
Abdel5
  • 171
  • 1
  • 1
  • 6
6
votes
1 answer

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the Windows 8 machines for elevated and non-elevated…
JRoppert
  • 311
  • 1
  • 2
  • 6
6
votes
1 answer

shell /bin/false allowing SFTP access [Ubuntu 12.04]

I have a Linux installation (Ubuntu 12.04), managed not only by me. I had restricted SSH access to a user using /usr/sbin/usermod -s /bin/false my_user This didn't allow neither SFTP access nor console access. However today, I found out that…
Krt_Malta
  • 173
  • 1
  • 7
6
votes
2 answers

Win2008: SC SDSET - how to grant a specific local user rights to stop and start a specific local service?

Where is a useful reference for the sdset command? I can read and read, and I have yet to find a straightforward list of steps to say: Service: App User: Joe Grant Joe start/stop/restart to App (Why can't it be that easy? ) Note: Getting sdset wrong…
6
votes
1 answer

Make a program un-uninstallable by Local Admin

I have a system monitoring tool/service, that runs on individual desktops in the network. On the network each user is Local Admin. I would like to make it so that only Domain Admin can uninstall this monitoring tool/service. How do I change the…
6
votes
2 answers

Start ELEVATED script from within script

Hallo, I'm playing around with Powershell (relative NewBie) and I'm looking for the easiest way to call a Powershell script with elevated rights from within another script. I know of the runas verb for start-process which allows me to start a new…
Ulrich
5
votes
1 answer

How to give write permissions using setfacl while retaining existing permissions?

I want to give write permission to a specific user on a dir recursively without loosing any existing permissions that the user may have. I believe I can use something like this to give write permissions to the user: setfacl -R -m u:user:w dir/* but…
comatose
  • 151
  • 1
  • 3
5
votes
2 answers

file copy using restore privilege

We have a Windows backup package which presents Virtual Machine backedup filesystems as iSCSI mounts. Helpdesk users need to perform restore operations, which is done by copying files from the mounted point in time filesystem back to the production…
user417387
  • 51
  • 3
5
votes
2 answers

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, because this user should not be able to login and…
5
votes
5 answers

How to give a user access to the Certificate Store on Windows Server 2012?

I've battling an issue for the last couple of days that I cannot seem to resolve. I'm not an administrator although I have some knowledge about some administrative tasks. I have a PowerShell script that uses XapSignTool.exe to sign a .xap package.…
simich
  • 171
  • 1
  • 6
5
votes
1 answer

Windows Task Scheduler cannot access EFS encrypted folder despite running as a user with access

I have a batch file set to run via Task Scheduler in Windows Server 2008 R2. The batch file is being used to rotate and compress MySQL logs, and the folder containing these logs is encrypted using the Windows built in EFS encryption. I found a VBS…
1
2
3
27 28