Re: need help in managing administrators

["T Biehn" <tbiehn () gmail com>]

In short, this depends on the permissions needed / how the installer
determines if the user has them. The easiest thing to do is to give
local administrator access (I'm assuming Windows platform because it
sounds like it), if this is not permissible to you (as local admin
access can easily be leveraged into obtaining domain admin) then
creating a user account with the required permissions may be your best
bet, but again, any extra permissions the installer may need can
probably be used to get local administrator access, then domain
administrator access.
As you probably don't care, go ahead and look at Microsoft KB and
search around for custom user permissions (Which range from Files, to
Registry RW, to System ability to install drivers, services,
impersonate users, create users...) Of course if your installer just
looks to see if the person installing is an Administrator instead of
looking for the access, then all this trouble is for naught.

I'd be interested to know if there was something I was missing, hence the RTA.

LOLDONGS,

Travis
On Dec 2, 2007 4:42 AM, happy nino <nadtec () hotmail com> wrote:
>  Hi All,
> i've a problem in my organization that we have several domain admins, we are
> in the process of removing most of them but i need to have a person only
> authorized to install
> new software to users' computers but without having access to other parts of
> the users machines, is this possible ?..can i delegate a function like this
> only to certain users with out
> being domain admins?
> Appreciate your great help
> thanks alot
>
> regards,
> Nad
>
>
>
>
>
> ________________________________
> Get closer to the jungle. I'm a Celebrity Get Me Out Of Here!
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/