[GRLUG] Admin rights

mooselikebriard moosebriard at gmail.com
Thu Mar 17 20:51:51 EDT 2011


I would advise being careful of modifying a company computer.  Any
modifications not OK'd by corporate could be construed as destruction of
property, and be a fire-able offense.  As stated previously, systems are
locked down for a reason.  If you open a security hole and bad things
cascade to your network, you could (worst case scenario) face a lawsuit for
property damage to your company.

I would seriously take Jonathan's advice and work with your network admins.
 Most of us are decent and are willing to help users.

On Thu, Mar 17, 2011 at 3:59 PM, Jonathan Jesse <jjesse at gmail.com> wrote:

> If it is part of a domain there is a good reason that things are locked
> down.  Work w/ the process instead of around the process.  Is there a reason
> you need local admin outside of installing software on it?  If so your
> domain admin should be able to install software for you, following the
> normal process of software installation.  If is part of a domain for work
> are you violating any policies/rules/procedures by "hacking" the system to
> give you rights?
> A bit lost as to what the goal in this is?
>
> On Thu, Mar 17, 2011 at 1:07 PM, Matt Michielsen <mattmichielsen at gmail.com
> > wrote:
>
>> On Thu, Mar 17, 2011 at 1:01 PM, Adam Tauno Williams
>> <awilliam at whitemice.org> wrote:
>> > On Thu, 2011-03-17 at 12:54 -0400, Don Wood wrote:
>> >
>> >
>> >> Casey, you said that it is a part of a domain.  I would see your
>> >> domain Administrator, you will need domain admin rights as well as
>> >> schema admin rights.
>> >> Hope this helps Margie
>> >> No, he only needs his domain account to be given local admin rights.
>> >
>> > +1,  but only a Domain Administrator is capable of doing that without
>> > having to jump through a myriad of hoops.
>> >
>>
>> Not necessarily. Unless your myriad of hoops definition is a little
>> different than mine. He should be able to use the local admin user
>> (potentially after unlocking it with a ntpasswd boot cd) to grant his
>> domain user local privileges. As for Power User vs. Administrator, it
>> depends on what other policies are applied. Power User is probably
>> good enough.
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>> _______________________________________________
>> grlug mailing list
>> grlug at grlug.org
>> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
>>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
> _______________________________________________
> grlug mailing list
> grlug at grlug.org
> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
>

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shinobu.grlug.org/pipermail/grlug/attachments/20110317/e0855dc2/attachment-0001.html>


More information about the grlug mailing list