I've found you can avoid giving Admin rights and still run virtually any
application. You may need to allow explicit permissions to specific
directories/files and also certain registry keys.
Launch the application while running filemon and regmon in the
background and you should be able to get a definitive list where you
will need to grant access.
These utilities are extremely helpful in this scenario and available
free from Sysinternals.
rob
-----Original Message-----
From: TOSE [mailto:imranfbhatti_at_gmail.com]
Sent: Friday, March 04, 2005 7:55 AM
To: security-basics_at_securityfocus.com
Subject: Removing administrative rights [help Required]
Hi All,
I have a small Security concerns regarding giving Administrative
rights to the domain users ( on there local PC)
Some of my application like Autocad etc. are not running without
administrative rights.
So We have to add the users to the local administrators group for
running these applications
Is there any method or way to remove this method. ?
I want to remove this practise and want Pc users have minimum
previlaage for running the applications.
Please Help me
Best Regards
TOSE
Received on Mar 07 2005
Intro
