• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1801
  • Last Modified:

how to stop users from stopping radmin server or change settings using GPO?

how can i stop users from stopping radmin server or change settings using GPO?
in other words, i want to deploy the radmin server 3.1 in my organization but i don't want users to be able to stop the radmin server or change the settings.
is it possible to do so from the group policy?
or can i modify the radmin msi file to do that?
help please.
0
DAL_Group
Asked:
DAL_Group
  • 5
  • 3
2 Solutions
 
Vadim RappCommented:
> or can i modify the radmin msi file to do that?

In MSI by limiting permissions on the installed files, so if stopping the server involves running some program, or modifying files involves editing a file, that's who it's possible. But local admin users probably still can kill any process from task manager. For more detailed answer, you'll have to explain how it is possible to stop your radmin server and how to change the settings.
0
 
DAL_GroupAuthor Commented:
you can either right click the icon on the tray and then click "Stop radmin server" or "settings for Radmin server".
and another way: go to all programs => Radmin server 3 => Stop radmin server or settings for Radmin server.

i don't want users to be able to do that.
thank you for the help.

radmin-stop-server.bmp
radmin-stop-server2.bmp
0
 
Vadim RappCommented:
I think, only if radmin server¹ has setting like "show tray icon". If that setting exists and is controlled by registry setting, then it's possible to create transform with that registry setting, so when it's installed, it does not show tray icon.

¹) of which I have no idea
0
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

 
DAL_GroupAuthor Commented:
it doesn't have such a setting.
but even if it does how can i change the registry from the GPO?
when i go to Computer configurations => windows settings => security settings => registry, and i right click it then click add key, it gives me the keys without the ability to modify them.
i want to add the registry key because i can modify its security settings, take all privileges from the users and just give them to the administrators, but nothing happened.
see the photo attached.
reg-radmin-GPO.bmp
0
 
Vadim RappCommented:
You don't change registry setting from GPO. You would alter installation package so that the installation would install that registry setting. For that, you would create so called Transform, which would be then deployed along with the installation - see tab "modifications" in the deployment package. But if there's no such setting in the program, there's absolutely nothing you can do. If the program is programmed to do X no matter what, then the only way to preclude it  from that is not to run the program. Even if you somehow managed to block program's access to the tray, it would almost certainly crash, since it's programmed to use it.
0
 
Vadim RappCommented:
...speaking of configuring registry access in GPO - even though it's not hte best idea (transform would be better), I don't see why it wouldn't work. I actually was able to configure security for any key I wanted.

p1.PNG
p2.PNG
p3.PNG
p4.PNG
0
 
DAL_GroupAuthor Commented:
this is exactly what i did, but it gave me a mixed results, some users in a specific computers can stop the server and some can't.
i'm totally lost.
but thank you for the help.
0
 
Vadim RappCommented:
on the computers where users were able to make the change when they shouldn't, I would verify the actual permissions in regedit, and tried to make the change by regedit manually. If they can't but still were able to change settings of the program, it only means that the settings are elsewhere. I would then use filemon or regmon monitoring writes during the change to find out where.
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now