[gptalk] Re: Local Admin Privilege...
- From: "Nelson, Jamie" <Jamie.Nelson@xxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Tue, 23 Sep 2008 13:05:47 -0500
The compatibility tool kit is nice (there is supposed to be one for XP
too I thought), but for a very comprehensive solution I would look at
BeyondTrust Privilege Manager (formerly a DesktopStandard product). It
is not free but will do the job without the need to poke holes in your
registry and file ACLs. It alters permissions at the process token level
so you don't have to apply custom permissions to files/folders or
registry keys to get things to work. They also have a free auditor
product which helps you identify problem applications in LUA
environments.
Definitely worth a look. I've never used it in production but have seen
quite a few demos and heard pretty good things about it from some other
folks I know.
Regards,
Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon
Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 |
http://www.dvn.com
-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Omar Droubi
Sent: Tuesday, September 23, 2008 12:50 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Local Admin Prvilege...
If you guys haven't seen it yet: Compatibility Application Tool Kit (not
for XP)
http://technet.microsoft.com/en-us/windows/aa905066.aspx
Of course this is for Vista and I think the latest rev is also for
Windows 2008.
This tool can automate the necessary changes to client profiles and
workstation to allow applications to run properly under Vista- even
those that require elevation.
I seen a demo and it looks worth the testing and usage- When you do new
Vista implementations.
Just FYI as many are still on XP.
Omar Droubi
omar@xxxxxxxxxxxxxxxxxxxxx
650-726-0300
________________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Deepu [yoursfren@xxxxxxxxxxxxxx]
Sent: Monday, September 22, 2008 11:14 PM
To: gptalk@xxxxxxxxxxxxx
Cc: darren@xxxxxxxxxx
Subject: [gptalk] Local Admin Prvilege...
Hi Everyone...
I have a particular requirement. One of my software needs local
admin privilege to run. Now if i'll make the domain users, member
of local admin they will be able to play with the system. i.e they
will be able to install/de-install programs with ease which i dont
want.
So, is there any way where i can allow that particular software to
run as local admin, without giving the local admin right to the
domain users...
Your suggestion/solution is highly welcome...
Thanks...
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
Confidentiality Warning: This message and any attachments are intended only for
the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review,
retransmission, conversion to hard copy, copying, circulation or other use of
all or any portion of this message and any attachments is strictly prohibited.
If you are not the intended recipient, please notify the sender immediately by
return e-mail, and delete this message and any attachments from your system.
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
- » [gptalk] Re: Local Admin Privilege...
