fgs5635
asked on
Temp Admin Rights
Does anyone know if a tool exists that can grant users temp local admin rights on a pc?
A way of maybe granting it them for 30mins or current windows session etc?
A way of maybe granting it them for 30mins or current windows session etc?
ASKER
Sometimes the runas command doesn't work for me and its just a pain giving the user admin rights, logging them out then back in, installing something, then removing the rights again etc etc. I figured there must be a tool out there that does this for me.
Basically I'm just being a bit lazy, haha.
Basically I'm just being a bit lazy, haha.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Firstly, promoting them for 30mins etc. is complicated in itself.
Secondly, the user will need to LOG OFF and re LOGIN to get the admin level access
Thirdly, it poses a security risk.
I suggest you try TQCRUNAS, as mentioned above.
Secondly, the user will need to LOG OFF and re LOGIN to get the admin level access
Thirdly, it poses a security risk.
I suggest you try TQCRUNAS, as mentioned above.
Hii fgs5635, this question has been open for a while. Would you please assign points if issue is resolved
ASKER
Will do. One last question before I give the points. Is there a tool out there that can scan your network and give you a report of who has local admin rights on each pc?
Hi fgs5635,
You do not really need a tool for this purpose.
I have written a script for you to do this.
Create a share on the server with read/write access to everyone. Lets say it is X:\ drive
Now roll out a logon script using group policy to all the PCs.
logon.bat
-------------------------- ---------- ---------- ---------- ------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%coumputername%.txt
net use X: /delete /yes
exit
-------------------------- ---------- ---------- ---------- ---------- ------
This way under your X:\ drive you will have a file with the coumputername as the name of the file and the contenyts will tell you the local admins. Any more help let me know
You do not really need a tool for this purpose.
I have written a script for you to do this.
Create a share on the server with read/write access to everyone. Lets say it is X:\ drive
Now roll out a logon script using group policy to all the PCs.
logon.bat
--------------------------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%coumputername%.txt
net use X: /delete /yes
exit
--------------------------
This way under your X:\ drive you will have a file with the coumputername as the name of the file and the contenyts will tell you the local admins. Any more help let me know
Sorry made a slight spell in the above script
--------------------------------------------------------------
@echo off
net use X: /delete /yes
net use X: \\server_name\Share_name
c:\
net localgroup administrators > x:\%computername%.txt
net use X: /delete /yes
exit
------------------------------------------------------------------------
ASKER
Excellent.
thanks a lot
thanks a lot
Can you tell me what exactly do you wanna do in that 30mins so that I can give you other suggestions.