[NTSysADM] Slow day or just so busy

2014-01-15 Thread Jon Harris
Is it a slow day or is everyone just working so hard no one has had time to post anything? Jon

RE: [NTSysADM] Slow day or just so busy

2014-01-15 Thread John Cook
Busy day which is way better than a slow day. Sent from my Verizon Wireless 4G LTE smartphone Original message From: Jon Harris Date:01/15/2014 7:11 PM (GMT-05:00) To: ntsysadm@lists.myitforum.com Subject: [NTSysADM] Slow day or just so busy Is it a slow day or is everyone

Re: [NTSysADM] Slow day or just so busy

2014-01-15 Thread Jonathan Link
Busy day and 6th day without water. On Wednesday, January 15, 2014, Jon Harris jk.har...@live.com wrote: Is it a slow day or is everyone just working so hard no one has had time to post anything? Jon

[NTSysADM] Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Aakash Shah
Does anyone have any experience with either AppSense Application Manager or ViewFinity Privilege Management, and have any good or bad experiences to share supporting and running these products? Background: We are working with a department that has 7 developers that need to use IIS and Visual

[NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Phil Brutsche
Microsoft's Application Compatibility Toolkit may help here. -- Phil Brutsche p...@optimumdata.com From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Aakash Shah Sent: Wednesday, January 15, 2014 10:15 PM To: ntsysadm@lists.myitforum.com Subject:

[NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Aakash Shah
Thanks - I'll take a look at that. However, from some articles I found earlier, Microsoft also recommends that you admin rights are needed to debug IIS based projects from VS. Thanks, -Aakash Shah From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Phil

Re: [NTSysADM] Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Rankin, James R
AppSense Application Manager is absolutely perfect for this, I use I all the time. (I do write a blog about AppSense products though). However I've yet to see another privilege management tool with such a full set of features. The use case you are talking about I have deployed many times, and

Re: [NTSysADM] Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread James Rankin
Here's a link to all my posts dealing with Application Manager http://appsensebigot.blogspot.co.uk/p/application-manager.html Also, since v8.7 Application Manager configurations can be deployed through Group Policy, foregoing the need for SQL Server, IIS or any of the heavy redundancy normally

[NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Ken Schaefer
This depends on what/how you're running apps in IIS If you're using Windows Vista onwards, then SeDebug Privilege is restricted: http://msdn.microsoft.com/en-us/library/bb625963.aspx So, without SeDebug privilege you can debug privileges that are running under the same account as yourself, and

Re: [NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Rankin, James R
AppSense Application Manager can add admin rights, or the SeDebug privilege, or both, as required. It can also give these on a per-process basis and has a common dialog option to stop elevated rights leaking into things such as Explorer. Sent from my (new!) BlackBerry, which may make me an

RE: [NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Ken Schaefer
What about the fact that, unlike most applications, VS.NET's capable of compiling and executing any arbitrary code that the developer chooses to write? Would that allow a determined developer to perform otherwise unauthorised actions because you've elevated that single process? Cheers Ken

Re: [NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Rankin, James R
Interesting point, but I believe, if you have Application Manager running in Restricted Mode for administrators also, it should block the code as it will not meet the criteria for execution. I may test that to verify, if I can find some code that works :-) Sent from my (new!) BlackBerry, which

RE: [NTSysADM] RE: Windows Privilege Management Solutions (Allowing Non-Admins To Run Programs That Require Admin Rights)

2014-01-15 Thread Aakash Shah
Most of the applications in this product space have a feature to allow child processes that is disabled by default. However in our testing, our Devs did require elevation for child processes too and so we had to enable that. Regarding SeDebug, we did attempt to grant this user this right, but