On 18 Aug 2008 at 15:33, Andy Ognenoff wrote in a thread titled "Default 
browsers":

> I had the exact same thing happen here.  I had to make the user account an
> admin temporarily, reset FF as the default browser, reboot, and take away
> admin privileges and it all worked again.  Not a clue as to why that all
> happened.

MakeMeAdmin.CMD is your friend here.
    Aaron Margosis' "Non-Admin" WebLog : MakeMeAdmin -- temporary admin for 
    your Limited User account
    http://blogs.msdn.com/aaron_margosis/archive/2004/07/24/193721.aspx

Just Start -> Run "MakeMeAdmin" and fire up Firefox from the red CMD window. 
Don't have to log out or reboot when you're done (although this wierd situation 
might have required that for the change you needed to be implemented).

Haven't actually tried this one, but it looks intriguing:

    SourceForge.net: Sudo for Windows
    "Sudo for Windows (sudowin) allows authorized users to launch 
    processes with elevated privileges using their own passphrase. Unlike 
    the runas command, Sudo for Windows preserves the user's profile and 
    ownership of created objects."
    http://sourceforge.net/projects/sudowin

I don't think I would want to leave any of these tools lying around to allow 
users to run programs with elevated privileges, however.  I came across this 
posting on the page for WinSUDO:

    nonadmin - WinSUDO
    "There are other security issues that would arise even when using 
    MakeMeAdmin and WinSUDO. Example, I tried using it to run a certain 
    game (FreeStyleOnline), the game worked flawlessly, but clicking on 
    one of the links of the game's Welcome/Splash screen spawned an 
    Internet Explorer with access similar to that of an admin. With this 
    spawned IE, I am able to delete any files from say "Program Files" 
    which a restricted user cannot. In fact, I was also able to create a 
    new user from this spawned IE, actually I can create a user belonging 
    to Administrators group through this way which for me breaks 
    security."
    http://nonadmin.editme.com/WinSUDO

If you allow a user to run a program with elevated rights AND the program has a 
File -> Open dialog, the user can probably right-click 
c:\windows\system32\nusermgr.cpl and create an admin user ....


--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
+-----------------------------------+




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to