Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 53 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow bypass admin access for software installations
EH-Net
May 18, 2013, 02:03:45 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: bypass admin access for software installations  (Read 15416 times)
0 Members and 1 Guest are viewing this topic.
Hack_80
Jr. Member
**
Offline Offline

Posts: 86


Black buck


View Profile
« on: September 28, 2007, 10:44:13 PM »

Hi,
 Is there any way to install the software without adding user to admin group in windows XP/2000
Logged
RichM
EH-Net Columnist
Newbie
*****
Offline Offline

Posts: 49


View Profile
« Reply #1 on: September 28, 2007, 10:57:27 PM »

Hack_80,

The easiest way is to right click the program, select 'run as' click 'run', click 'the following user' radial button then enter the username and password for administrator.  Off you go.

Also, you can make a user a 'power user' and meet most applications requirements without making a user a local admin, but beware that a power user can make themselves an admin. 

Never give a user more rights than they need to get their job done; unless you absolutely (read:someone that can end your employment) have to.
Logged
Hack_80
Jr. Member
**
Offline Offline

Posts: 86


Black buck


View Profile
« Reply #2 on: September 29, 2007, 12:56:09 AM »

 I tried with same but it can be applicable for restricted installations. There is a chance of misuse.
I wanted user to install the required applications but not unwanted freewares.
Any suggestions??
Logged
RichM
EH-Net Columnist
Newbie
*****
Offline Offline

Posts: 49


View Profile
« Reply #3 on: September 29, 2007, 06:47:32 AM »

Why do you want to do that? In my experience users will always try to take advantage of the situation.  Yes, you could create a group policy that allows users to d/l and install certain apps on their own; but that is a lot of work and once you start you will never stop. 

If manually installing it (remotely with vnc) is not an option, take the .exe file and create an msi (good explanation here http://www.mcse.ms/message948078.html), then push it to the users when they log in using a kixscript www.kixtart.org/.  After authenticating to the network, the user logs in, the package will be installed and least privilege is still maintained. 

Once you have the initial leg work done, you will have a managable system for deploying anything; without giving up an ounce of control to the users.
Logged
squidmaster
Newbie
*
Offline Offline

Posts: 21


View Profile
« Reply #4 on: October 07, 2007, 12:20:37 PM »

boot into safemode.
make a new user
(I always make one called cheese.)
Logged
Manu Zacharia (-M-)
Sr. Member
****
Offline Offline

Posts: 393


c0c0n Hacking Conference - where hackers unite


View Profile WWW
« Reply #5 on: October 07, 2007, 09:05:44 PM »

boot into safemode.
make a new user
(I always make one called cheese.)

What this will do? Do you think this is the right solution?
Logged

Manu Zacharia
MVP (Enterprise Security), ISLA-2010 (ISC)², C|EH, C|HFI, CCNA, MCP,
Certified ISO 27001:2005 Lead Auditor

There are 3 roads to spoil; women, gambling & hacking. The most pleasant with women, the quickest with gambling, but the surest is hacking - c0c0n
T3rm1ght
Newbie
*
Offline Offline

Posts: 25



View Profile
« Reply #6 on: October 08, 2007, 06:24:11 AM »

i second what Rich M said. If you are the administrator or the machine you can use group policy to restrict users from running a particular software.
go RUN------>pgedit.msc------>user settings------>software restrictions.

any prob you encounter let me know

NB: i don't want to beleive that in another way you are the user trying to by pass the administrator


perry
Logged

>>There Is Always A Blind Spot In
>>Every Software, It's Up To Us To Find It
squidmaster
Newbie
*
Offline Offline

Posts: 21


View Profile
« Reply #7 on: October 08, 2007, 03:44:12 PM »

boot into safemode.
make a new user
(I always make one called cheese.)

What this will do? Do you think this is the right solution?

This will allow you to make an admin user. This will solve the solution because now you have an admin account.
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.09 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.