Link to home
Start Free TrialLog in
Avatar of fgs5635
fgs5635

asked on

Temp Admin Rights

Does anyone know if a tool exists that can grant users temp local admin rights on a pc?

A way of maybe granting it them for 30mins or current windows session etc?
Avatar of manav08
manav08
Flag of Australia image

Hmm. I may have come across this before.
Can you tell me what exactly do you wanna do in that 30mins so that I can give you other suggestions.
Avatar of fgs5635
fgs5635

ASKER

Sometimes the runas command doesn't work for me and its just a pain giving the user admin rights, logging them out then back in, installing something, then removing the rights again etc etc. I figured there must be a tool out there that does this for me.

Basically I'm just being a bit lazy, haha.
ASKER CERTIFIED SOLUTION
Avatar of manav08
manav08
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Firstly, promoting them for 30mins etc. is complicated in itself.
Secondly, the user will need to LOG OFF and re LOGIN to get the admin level access
Thirdly, it poses a security risk.

I suggest you try TQCRUNAS, as mentioned above.
Hii fgs5635, this question has been open for a while. Would you please assign points if issue is resolved
Avatar of fgs5635

ASKER

Will do. One last question before I give the points. Is there a tool out there that can scan your network and give you a report of who has local admin rights on each pc?
Hi fgs5635,

You do not really need a tool for this purpose.
I have written a script for you to do this.
Create a share on the server with read/write access to everyone. Lets say it is X:\ drive
Now roll out a logon script using group policy to all the PCs.

logon.bat
--------------------------------------------------------------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%coumputername%.txt
net use X: /delete /yes
exit
------------------------------------------------------------------------

This way under your X:\ drive you will have a file with the coumputername as the name of the file and the contenyts will tell you the local admins. Any more help let me know
Sorry made a slight spell in the above script
--------------------------------------------------------------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%computername%.txt
net use X: /delete /yes
exit
------------------------------------------------------------------------

Open in new window

Avatar of fgs5635

ASKER

Excellent.

thanks a lot