RE: Admin Rights required on Terminal Services

["Andrew Shore" <andrew.shore () holistecs com>]

Have you tried running the NTCOMPAT security policy rather than giving
users elevated right.

Admin privilege on a terminal server is asking for trouble.

Andy 

-----Original Message-----
From: sf_mail_sbm () yahoo com [mailto:sf_mail_sbm () yahoo com] 
Sent: 17 March 2005 15:46
To: security-basics () securityfocus com
Subject: Admin Rights required on Terminal Services



Dear List,

We have an application that needs local admin rights to run

This is a legacy application, and cannot be run as a service

We are planning to run the application on a Terminal Services server
(Win 2K3)

Clients cannot run the application thru TS, since they do not have local
admin rights

One option is to put the users as local admins, and restrict the menus
to which they have access through Group Policy

Is there any other way to make users run the application without givin
them local admin rights?

Tried to look at "runas", but user will need to enter the administrator
password

Thank u all for ur help

Ronish