We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

Temp Admin Rights

fgs5635
fgs5635 asked
on
Medium Priority
584 Views
Last Modified: 2012-05-06
Does anyone know if a tool exists that can grant users temp local admin rights on a pc?

A way of maybe granting it them for 30mins or current windows session etc?
Comment
Watch Question

Commented:
Hmm. I may have come across this before.
Can you tell me what exactly do you wanna do in that 30mins so that I can give you other suggestions.

Author

Commented:
Sometimes the runas command doesn't work for me and its just a pain giving the user admin rights, logging them out then back in, installing something, then removing the rights again etc etc. I figured there must be a tool out there that does this for me.

Basically I'm just being a bit lazy, haha.
Commented:
Well if you have a software file in the format .exe or whatever that you do not mind user installing themselves I suggets using tqcrunas http://www.appdeploy.com/downloads/detail.asp?id=310
I have used this before and it works like a charm. It is worth for its price.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Commented:
Firstly, promoting them for 30mins etc. is complicated in itself.
Secondly, the user will need to LOG OFF and re LOGIN to get the admin level access
Thirdly, it poses a security risk.

I suggest you try TQCRUNAS, as mentioned above.

Commented:
Hii fgs5635, this question has been open for a while. Would you please assign points if issue is resolved

Author

Commented:
Will do. One last question before I give the points. Is there a tool out there that can scan your network and give you a report of who has local admin rights on each pc?

Commented:
Hi fgs5635,

You do not really need a tool for this purpose.
I have written a script for you to do this.
Create a share on the server with read/write access to everyone. Lets say it is X:\ drive
Now roll out a logon script using group policy to all the PCs.

logon.bat
--------------------------------------------------------------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%coumputername%.txt
net use X: /delete /yes
exit
------------------------------------------------------------------------

This way under your X:\ drive you will have a file with the coumputername as the name of the file and the contenyts will tell you the local admins. Any more help let me know

Commented:
Sorry made a slight spell in the above script
--------------------------------------------------------------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%computername%.txt
net use X: /delete /yes
exit
------------------------------------------------------------------------

Open in new window

Author

Commented:
Excellent.

thanks a lot
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.