Real Geek Forums  

Go Back   Real Geek Forums > Archives > Operating Systems > Windows Vista > Windows Vista Security

Notices

Reply

How to give non-admin user ability to chkdsk drive?

 

LinkBack Thread Tools Display Modes
Old 06-25-2008, 07:29 PM   #11 (permalink)
Default Re: How to give non-admin user ability to chkdsk drive?


"Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
news:ujGMtzl1IHA.5832@TK2MSFTNGP02.phx.gbl...
Quote:
> Dave R. wrote:
Quote:
>>
>>
>> We are trying to put into place a concept of a "System Maintainer" -
>> someone who can handle many aspects of system maintenance, but
>> doesn't have the keys to the kingdom as it were.
>
>
> Part of the problem is that, for some reason, you're mistakenly
> thinking of Chkdsk as some sort of routine maintenance tool.
No, I'm not. I'm thinking that *some* aspects of system administration
can be handled by *some* users who have *some*, but not all, of the
rights/privileges of system administrators.
Quote:
> It isn't. It's designed to find and correct problems with the hard
> drive (limited, to be sure) and the file system.
I'm fully aware of chkdsk's purpose and usage, thanks.
Quote:
> It has no preventative value, at all.
I'm not looking for "preventative value".
Quote:
> All it's routine periodic use would do is unnecessarily increase the
> wear and tear on the hard drives.
First, I'm not looking for it to be used "periodically" or "routinely".
Second, if you actually believe this, then you have no idea how a hard
drive functions. That's like saying "the routine periodic reading of
data from hard drives unnecessarily increases the wear and tear on the
hard drives."
Quote:
> And granting ordinary (or even power users)
I'm not looking to give "ordinary" users, or "power users", this
ability. You should stop trying to divine my intent as you are
consistently making incorrect assumptions.
Quote:
> the ability to alter the very foundation on which the OS,
> applications, and data rests is very much granting the "keys to the
> kingdom."
No, it is granting *a* key to *one part* of the kingdom. A key that I
trust certain users to have. What is it about this that bothers you so
much?

Regards,

Dave


Dave R.
Guest
 
Posts: n/a
Reply With Quote  
Old 06-25-2008, 07:38 PM   #12 (permalink)
Default Re: How to give non-admin user ability to chkdsk drive?

Thanks for the constructive reply, Mark. I'll take a closer look at
your suggestions and ideas and see if they can get me where I want to
go.

Regards,

Dave

"Mark" <jmhonzell@nospam.comcast.net> wrote in message
news:B45B8D1E-59F0-4918-A1AA-12D4258D01F6@microsoft.com...
Quote:
> Command-line utilities can be run from standard user without prompts
> if the application is given a manifest assigning highestAvailable.
> Unfortunately, this may also not give the results you want...
> The higher privileged application will open in a separate "DOS" window
> and close without providing the user an opportunity to read any
> information presented. ChkDsk can be assigned in this method to run on
> the next boot where the information will be provided to the user, or
> the logfile that ChkDsk could be reviewed after running, but no
> protected area sectors can be repaired while run from a standard user.
>
> Again, this is probably not what you wanted.
> Easier would be to setup ChkDsk to run each boot by marking the disk
> as "dirty" during network initialization.
> Again, missing the concept. You want to provide the standard user the
> ability to run certain applications while running Windows.
>
> I don't think that exists. Nor did it exist in prior versions. (They
> were simply running as administrator and you restricted those
> functions you did not want to give to them.)
>
> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
> news:OUHyEef1IHA.2292@TK2MSFTNGP03.phx.gbl...
Quote:
>>
>> "Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
>> news:uQT2Hba1IHA.2384@TK2MSFTNGP04.phx.gbl...
Quote:
>>> Dave R. wrote:
>>>>
>>>>
>>>> That's what I was afraid of. Any idea why this would be restricted
>>>> to administrators only?
>>>>
>>>
>>> Because only administrators should have file system level access to
>>> the contents of the hard drive; it's not something regular users
>>> should ever have to do.
>>>
>>>
>>
>> The problem with that approach is that it lacks granularity in
>> privilige assignment. Just because a user can be trusted to do some
>> aspects of system administration does not necessarily mean they can
>> be trusted to perform all aspects of system administration. Yet, in
>> this case (and others I keep running across), I cannot separate the
>> ability to do a simple disk check from the ability to do ALL
>> administrative tasks.
>>
>> We are trying to put into place a concept of a "System Maintainer" -
>> someone who can handle many aspects of system maintenance, but
>> doesn't have the keys to the kingdom as it were. Unfortunately, we
>> are being thwarted by the security model built into Windows. If
>> anyone has any ideas on how to approach this in a Windows
>> (specifically, Vista) environment, I'm all ears.
>>
>> Regards,
>>
>> Dave
>>
>

Dave R.
Guest
 
Posts: n/a
Reply With Quote  
Old 07-01-2008, 05:25 PM   #13 (permalink)
Default Re: How to give non-admin user ability to chkdsk drive?

This is an interesting thread. A bit hostile, but interesting.

You have the answer to your question, obviously it is not the answer you are
looking for. For the last few replies, the conversation has degraded into a
tit for tat, exchange which still will not change anything.

At the risk of incurring more enmity...the granularity that you seek is
available in Vista/server 2008. Technology evolves; things that were not
possible (for whatever reason) are added in later versions -Granularity of
administrative functionality is now possible in the latest version of
Microsoft server/client OS. Might be time to upgrade if this is something
that you need.

If you must have the functionality in your present version of software, it
might be worthwhile to create a function/macro with the ability you need.
Compile it with the appropriate permissions then deploy it thru GPO? You
seem knowledgeable, more than capable to handle the coding. It can be done.


"Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
news:uKGBCnv1IHA.6096@TK2MSFTNGP06.phx.gbl...
Quote:
>
> "Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
> news:ujGMtzl1IHA.5832@TK2MSFTNGP02.phx.gbl...
Quote:
>> Dave R. wrote:
Quote:
>>>
>>>
>>> We are trying to put into place a concept of a "System Maintainer" -
>>> someone who can handle many aspects of system maintenance, but doesn't
>>> have the keys to the kingdom as it were.
>>
>>
>> Part of the problem is that, for some reason, you're mistakenly thinking
>> of Chkdsk as some sort of routine maintenance tool.
>
> No, I'm not. I'm thinking that *some* aspects of system administration
> can be handled by *some* users who have *some*, but not all, of the
> rights/privileges of system administrators.
>
Quote:
>> It isn't. It's designed to find and correct problems with the hard drive
>> (limited, to be sure) and the file system.
>
> I'm fully aware of chkdsk's purpose and usage, thanks.
>
Quote:
>> It has no preventative value, at all.
>
> I'm not looking for "preventative value".
>
Quote:
>> All it's routine periodic use would do is unnecessarily increase the wear
>> and tear on the hard drives.
>
> First, I'm not looking for it to be used "periodically" or "routinely".
> Second, if you actually believe this, then you have no idea how a hard
> drive functions. That's like saying "the routine periodic reading of data
> from hard drives unnecessarily increases the wear and tear on the hard
> drives."
>
Quote:
>> And granting ordinary (or even power users)
>
> I'm not looking to give "ordinary" users, or "power users", this ability.
> You should stop trying to divine my intent as you are consistently making
> incorrect assumptions.
>
Quote:
>> the ability to alter the very foundation on which the OS, applications,
>> and data rests is very much granting the "keys to the kingdom."
>
> No, it is granting *a* key to *one part* of the kingdom. A key that I
> trust certain users to have. What is it about this that bothers you so
> much?
>
> Regards,
>
> Dave
>
Beoweolf
Guest
 
Posts: n/a
Reply With Quote  
Reply

Tags
None

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads

Thread Thread Starter Forum Replies Last Post
UAC doesn't give me a continue button - can't do anything as admin Chipwich00 Windows Vista Administration 0 02-23-2008 04:00 PM
How to give Full Control to new user kezhu Windows Vista Security 0 05-28-2007 01:43 PM
Installing additional drive, but Windows doesn't give it a drive letter! vharlow1 Customize Windows XP 1 12-17-2003 10:06 PM
lost ability to logon to local Admin account Rick Windows XP Network & Web 0 09-20-2003 02:09 AM
How to give Install Priv to a non Admin user Mike Windows XP Setup 0 09-10-2003 05:51 AM


All times are GMT. The time now is 10:41 AM.


Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright © 2005 - 2007 RealGeek.com. All rights reserved.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90