Re: [U2] [UV] uniadmin without having to be in administrators group?
In a message dated 5/4/2005 4:07:13 PM Pacific Daylight Time, [EMAIL PROTECTED] writes: There are references freely searchable on the WWW to Windows equivalents of the Unix su command which ought to be able to achieve this. I would caution you though that if you are not permitted access to Windows Administrator then someone would take a very dim view indeed of use of such a utility. The words door, exit, use and immediately come to mind. See an insiteful manager who found a person who could evade their security would promote that person to Security Manager ;) Will Johnson --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] [UV] uniadmin without having to be in administrators group?
JayJay, Thanks for the reply. I guess my point is that we WANT to grant a user complete usage of ALL the functions within uniadmin. However, we specifically do not want them to be a windows system administrator in order to use the tool. And yes, its ok if this individual can stop and start UV services - just those 2 or 3 services that are IN the uniadmin tool. But we don't want them to control other aspects of the server that are inherent when you are in the administrator's group. It seems like there is a need to have a administrator maintained group code that can be associated with users that need to use the tool and the tool checks to make sure the user trying to use it is a member of said group. This would accomplish our objective without granting unnecessary priveleges. (this sounds like a mod request for IBM to implement for uniadmin) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Jenkins Sent: Wednesday, May 04, 2005 3:57 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] [UV] uniadmin without having to be in administrators group? Troy This is not a good idea - you will be giving non-administrators the right to change Windows services.??? [snip] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] [UV] uniadmin without having to be in administrators group?
If you're on *nix platform you may be able to use SUDO ( http://www.sudo.ws/ ) that allows you to run certain commands as that may require root (or root-like access). I think many of the UVADMIN (or UDAMIN) commands require root or admin (WINDOWS) access to run O/S commands that require that access level. Then again it's almost Friday, and I don't want to overwork myself. =) Thanks, -- Donald Verhagen Application Development Manager [EMAIL PROTECTED] Tandem Staffing Solutions, Inc. 1690 S Congress Avenue, Suite 210 Delray Beach, FL 33445 USA Voice Phone: 561.454.3592 Fax Phone: 561.454.3640 [EMAIL PROTECTED] 4:30:20 PM 05/05/2005 Your idea about UV administrator group is one that we have wanted on our UV/Linux server too. Too many of the UV admin tools require root priviledges on the Unix servers. UV should not require root or system administrator privileges, but the admin functions should be assignable to a group of users. I agree IBM needs to make this type of mod to Universe. Ken Hall At 11:32 AM 5/5/2005, you wrote: JayJay, Thanks for the reply. I guess my point is that we WANT to grant a user complete usage of ALL the functions within uniadmin. However, we specifically do not want them to be a windows system administrator in order to use the tool. And yes, its ok if this individual can stop and start UV services - just those 2 or 3 services that are IN the uniadmin tool. But we don't want them to control other aspects of the server that are inherent when you are in the administrator's group. It seems like there is a need to have a administrator maintained group code that can be associated with users that need to use the tool and the tool checks to make sure the user trying to use it is a member of said group. This would accomplish our objective without granting unnecessary priveleges. (this sounds like a mod request for IBM to implement for uniadmin) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Jenkins Sent: Wednesday, May 04, 2005 3:57 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] [UV] uniadmin without having to be in administrators group? Troy This is not a good idea - you will be giving non-administrators the right to change Windows services.??? [snip] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ Ken R. Hall Information Technology Manager Western States Electric, Inc. a Hughes Supply Company 9151 SE McBrod Street Portland, OR 97222 503-653-8619 fax: 503-653-2279 mailto:[EMAIL PROTECTED] www.wselectric.com --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] [UV] uniadmin without having to be in administrators group?
Troy This is not a good idea - you will be giving non-administrators the right to change Windows services.??? However: I believe this is technically achievable (at your own risk). There are references freely searchable on the WWW to Windows equivalents of the Unix su command which ought to be able to achieve this. I would caution you though that if you are not permitted access to Windows Administrator then someone would take a very dim view indeed of use of such a utility. The words door, exit, use and immediately come to mind. As a user with the privilege and authority who finds it irksome - OK - Otherwise deepmost trouble awaits. Have you thought about using Remote Desktop (given you have admin rights).? [There are other programmatic back doors in C to higher-order Windows functions - however if you don't know them already then please do not go anywhere near them - and then only with trepidation.] Regards JayJay -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Buss, Troy (Logitek Systems) Sent: 04 May 2005 19:21 To: u2-users@listserver.u2ug.org Subject: [U2] [UV] uniadmin without having to be in administrators group? It is useful to be able to run uniadmin from time to time and I'm trying to find out if there is a way to have access to the utility without having to be part of the administrators group? (Windows 2003). The same question also applies to stopping and restarting redback using the RESTARTRGW and RESTARTACCT commands. We'd like to be able to grant access to these tools WITHOUT requiring the user be in the administrators group. Is it possible? Thanks! -Troy --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
