Solved

software rights management issues

Posted on 2013-11-20
5
284 Views
Last Modified: 2013-11-26
I have a Windows Server 2008 R2 system that is not part of Active Directory.  I need to allow a local user to run an application, but that application requires adminstrative right to run.  I do not want to provide the users Admin rights and know that in an AD system the rights can be granted for that program only to either group or user.  How do I do it without AD.

Thanks
 Dan
0
Comment
Question by:Campbelldw
  • 3
5 Comments
 
LVL 16

Accepted Solution

by:
Shaik M. Sajid earned 150 total points
ID: 39662583
simplt publish the application through terminal server... (RDP session)

save it on the server RDP shortcut... (save user id and password in it)

as server can manage  2 free RdP sessions ...

create a admin user in domain ... in group policy remove access rights to all unnecessary ..

thats it

all the best
0
 

Author Comment

by:Campbelldw
ID: 39662760
Thanks for the info there.  Had not thought about using the RDP locally like that.  There is no domain so it would be the local and I did not see lock down options in the LoGroupPolicy option provided by the SCM utility (which is what was used to apply the SSLF)
0
 
LVL 35

Assisted Solution

by:Mahesh
Mahesh earned 150 total points
ID: 39662856
Do one thing
download Steel runas 1.2 from below link

http://downloads.fyxm.net/Steel-RunAs-102634.html

This is the only link I found for freeware.

Next all versions are not freeware

logon to users computer with admin user and Install this utility on users computer
then open utility and select required application and working directory and provide administrator credentials
then create exe file which can be executed directly and it will run application as admin.
Now login as standard user and ask him to run created exe file
It should work hopefully
Thanks
0
 

Author Comment

by:Campbelldw
ID: 39662919
Mahesh,
Thanks for the input.  I will definately keep that software in mind moving forward.  My customer is super adverse to bringing new stuff into the environment, though sometimes it cannot be helped.  Due to this however, I am more interested in finding out if there is a solution inside the Windows Server OS without adding AD.
Dan
0
 

Author Closing Comment

by:Campbelldw
ID: 39677489
Both solutions are viable work arounds.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

By this time the large percentage of day-to-day transactions have shifted to mobile banking; here are some overriding areas QAs must investigate while testing mobile banking apps.  
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
Viewers will learn how to use the Hootsuite Dashboard.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now