Announcement

Collapse
No announcement yet.

Assign Local Admin Rights without local Admin Group

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Assign Local Admin Rights without local Admin Group

    Hi

    We upgraded our desktops from Windows XP to Windows 7, with Windows XP we used the resource kitís CDROMLOCK.EXE to lock down CD and DVD. Once installed a user had to be in the local administrators group to access a CD or DVD on that desktop.

    For Windows 7 it is not Windows 7 compatible so I run the EXE in Vista SP-2 Compatibility mode, which works perfect.

    My question: With a user in the local admin group they have access to the CD and DVD, but also have full access to the desktop, which is of concern. Does anyone know how to assign a user name (Either local Desktop or a Server 2003\2008\2010) domain account to a service or Exe?

    Is there a way to either create a folder with full rights and then put the exe in the folder, giving the user full admin rights to the folder, or assign full admin rights to s single EXE file?

    I am just not sure how Windows 7 controls local admin rights other than the local Admin Group.

    If this is in the wrong group, please move.

    Thanks

    B.

  • #2
    Re: Assign Local Admin Rights without local Admin Group

    Windows 7 has local policies with very much the same settings as domain Group Policies. You can set up separate policies for administrators and users, so you should have the flexibility you need to lock things down appropriately
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Assign Local Admin Rights without local Admin Group

      What I can't find is in the local security policy of Windows 7 desktop where your would assign rights to this service or the exe.

      B.

      Comment


      • #4
        Re: Assign Local Admin Rights without local Admin Group

        Does this help? http://webtrickz.com/how-to-disable-...ndows-7-vista/
        1 1 was a racehorse.
        2 2 was 1 2.
        1 1 1 1 race 1 day,
        2 2 1 1 2

        Comment

        Working...
        X