How to give non-admin user ability to chkdsk drive?

Posted: 06-19-2008, 07:39 PM
On some Vista Business systems I deploy, I need to be able to give
non-admin uers the ability to chkdsk drives. I found the "Perform
volume maintenance tasks" user rights policy, but that isn't doing it.

Anyone know if it is even possible (I know some things can only be done
by Administrators), and if so, how?

Regards,

Dave


How to give non-admin user ability to chkdsk drive?


Responses to "How to give non-admin user ability to chkdsk drive?"

Dave R.
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-20-2008, 07:36 PM

"Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
news:uOPD9Qk0IHA.4476@TK2MSFTNGP06.phx.gbl...
> On some Vista Business systems I deploy, I need to be able to give
> non-admin uers the ability to chkdsk drives. I found the "Perform
> volume maintenance tasks" user rights policy, but that isn't doing it.
>
> Anyone know if it is even possible (I know some things can only be
> done by Administrators), and if so, how?
>
Widening the net to include a couple of additional newsgroups...

Does anyone know if this can be done, and of so, how?

Regards,

Dave


Mr. Arnold
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-20-2008, 10:45 PM

"Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
news:eX3%23$zw0IHA.4164@TK2MSFTNGP03.phx.gbl...
>
> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
> news:uOPD9Qk0IHA.4476@TK2MSFTNGP06.phx.gbl...
>> On some Vista Business systems I deploy, I need to be able to give
>> non-admin uers the ability to chkdsk drives. I found the "Perform volume
>> maintenance tasks" user rights policy, but that isn't doing it.
>>
>> Anyone know if it is even possible (I know some things can only be done
>> by Administrators), and if so, how?
>>
>
> Widening the net to include a couple of additional newsgroups...
>
> Does anyone know if this can be done, and of so, how?
>
Even on XP, I don't think you can run ChKdsk without admin rights on XP if
the file system is NTFS and you can't do it on Vista with the file system
being NTFS. The only way you can do it is if the file system is FAT32 -- no
security.


Dave R.
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-23-2008, 01:25 PM

"Mr. Arnold" <MR. Arnold@Arnold.com> wrote in message
news:esGCddy0IHA.6096@TK2MSFTNGP06.phx.gbl...
>
> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
> news:eX3%23$zw0IHA.4164@TK2MSFTNGP03.phx.gbl...
>>
>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
>> news:uOPD9Qk0IHA.4476@TK2MSFTNGP06.phx.gbl...
>>> On some Vista Business systems I deploy, I need to be able to give
>>> non-admin uers the ability to chkdsk drives. I found the "Perform
>>> volume maintenance tasks" user rights policy, but that isn't doing
>>> it.
>>>
>>> Anyone know if it is even possible (I know some things can only be
>>> done by Administrators), and if so, how?
>>>
>>
>> Widening the net to include a couple of additional newsgroups...
>>
>> Does anyone know if this can be done, and of so, how?
>>
>
> Even on XP, I don't think you can run ChKdsk without admin rights on
> XP if the file system is NTFS and you can't do it on Vista with the
> file system being NTFS. The only way you can do it is if the file
> system is FAT32 -- no security.
>
That's what I was afraid of. Any idea why this would be restricted to
administrators only?

Regards,

Dave


Mr. Arnold
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-24-2008, 12:55 AM

"Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
news:OHl%23NST1IHA.416@TK2MSFTNGP04.phx.gbl...
>
> "Mr. Arnold" <MR. Arnold@Arnold.com> wrote in message
> news:esGCddy0IHA.6096@TK2MSFTNGP06.phx.gbl...
>>
>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
>> news:eX3%23$zw0IHA.4164@TK2MSFTNGP03.phx.gbl...
>>>
>>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
>>> news:uOPD9Qk0IHA.4476@TK2MSFTNGP06.phx.gbl...
>>>> On some Vista Business systems I deploy, I need to be able to give
>>>> non-admin uers the ability to chkdsk drives. I found the "Perform
>>>> volume maintenance tasks" user rights policy, but that isn't doing it.
>>>>
>>>> Anyone know if it is even possible (I know some things can only be done
>>>> by Administrators), and if so, how?
>>>>
>>>
>>> Widening the net to include a couple of additional newsgroups...
>>>
>>> Does anyone know if this can be done, and of so, how?
>>>
>>
>> Even on XP, I don't think you can run ChKdsk without admin rights on XP
>> if the file system is NTFS and you can't do it on Vista with the file
>> system being NTFS. The only way you can do it is if the file system is
>> FAT32 -- no security.
>>
>
> That's what I was afraid of. Any idea why this would be restricted to
> administrators only?
>
Because they are administrators that administer the O/S?

Bruce Chambers
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-24-2008, 03:02 AM

Dave R. wrote:
>
>
> That's what I was afraid of. Any idea why this would be restricted to
> administrators only?
>
Because only administrators should have file system level access to the
contents of the hard drive; it's not something regular users should ever
have to do.


--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
Dave R.
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-24-2008, 11:55 AM

"Mr. Arnold" <MR. Arnold@Arnold.com> wrote in message
news:eoLISUZ1IHA.2084@TK2MSFTNGP06.phx.gbl...
>
> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
> news:OHl%23NST1IHA.416@TK2MSFTNGP04.phx.gbl...
>>
>> "Mr. Arnold" <MR. Arnold@Arnold.com> wrote in message
>> news:esGCddy0IHA.6096@TK2MSFTNGP06.phx.gbl...
>>>
>>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
>>> news:eX3%23$zw0IHA.4164@TK2MSFTNGP03.phx.gbl...
>>>>
>>>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
>>>> news:uOPD9Qk0IHA.4476@TK2MSFTNGP06.phx.gbl...
>>>>> On some Vista Business systems I deploy, I need to be able to give
>>>>> non-admin uers the ability to chkdsk drives. I found the "Perform
>>>>> volume maintenance tasks" user rights policy, but that isn't doing
>>>>> it.
>>>>>
>>>>> Anyone know if it is even possible (I know some things can only be
>>>>> done by Administrators), and if so, how?
>>>>>
>>>>
>>>> Widening the net to include a couple of additional newsgroups...
>>>>
>>>> Does anyone know if this can be done, and of so, how?
>>>>
>>>
>>> Even on XP, I don't think you can run ChKdsk without admin rights on
>>> XP if the file system is NTFS and you can't do it on Vista with the
>>> file system being NTFS. The only way you can do it is if the file
>>> system is FAT32 -- no security.
>>>
>>
>> That's what I was afraid of. Any idea why this would be restricted
>> to administrators only?
>>
>
> Because they are administrators that administer the O/S?
I'm aparently not being clear, so let me try again:

Why can't I as an administrator give the ability to do any administrator
task to another user without giving them the ability to do ALL
administrator tasks? That design seems lacking to me.

Regards,

Dave


Dave R.
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-24-2008, 12:40 PM

"Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
news:uQT2Hba1IHA.2384@TK2MSFTNGP04.phx.gbl...
> Dave R. wrote:
>>
>>
>> That's what I was afraid of. Any idea why this would be restricted
>> to administrators only?
>>
>
> Because only administrators should have file system level access to
> the contents of the hard drive; it's not something regular users
> should ever have to do.
>
>
The problem with that approach is that it lacks granularity in privilige
assignment. Just because a user can be trusted to do some aspects of
system administration does not necessarily mean they can be trusted to
perform all aspects of system administration. Yet, in this case (and
others I keep running across), I cannot separate the ability to do a
simple disk check from the ability to do ALL administrative tasks.

We are trying to put into place a concept of a "System Maintainer" -
someone who can handle many aspects of system maintenance, but doesn't
have the keys to the kingdom as it were. Unfortunately, we are being
thwarted by the security model built into Windows. If anyone has any
ideas on how to approach this in a Windows (specifically, Vista)
environment, I'm all ears.

Regards,

Dave


Mark
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-24-2008, 07:29 PM
Command-line utilities can be run from standard user without prompts if the
application is given a manifest assigning highestAvailable. Unfortunately,
this may also not give the results you want...
The higher privileged application will open in a separate "DOS" window and
close without providing the user an opportunity to read any information
presented. ChkDsk can be assigned in this method to run on the next boot
where the information will be provided to the user, or the logfile that
ChkDsk could be reviewed after running, but no protected area sectors can be
repaired while run from a standard user.

Again, this is probably not what you wanted.
Easier would be to setup ChkDsk to run each boot by marking the disk as
"dirty" during network initialization.
Again, missing the concept. You want to provide the standard user the
ability to run certain applications while running Windows.

I don't think that exists. Nor did it exist in prior versions. (They were
simply running as administrator and you restricted those functions you did
not want to give to them.)

"Dave R." <dwragle (at) drbsystems (dot) com> wrote in message
news:OUHyEef1IHA.2292@TK2MSFTNGP03.phx.gbl...
>
> "Bruce Chambers" <bchambers@cable0ne.n3t> wrote in message
> news:uQT2Hba1IHA.2384@TK2MSFTNGP04.phx.gbl...
>> Dave R. wrote:
>>>
>>>
>>> That's what I was afraid of. Any idea why this would be restricted to
>>> administrators only?
>>>
>>
>> Because only administrators should have file system level access to the
>> contents of the hard drive; it's not something regular users should ever
>> have to do.
>>
>>
>
> The problem with that approach is that it lacks granularity in privilige
> assignment. Just because a user can be trusted to do some aspects of
> system administration does not necessarily mean they can be trusted to
> perform all aspects of system administration. Yet, in this case (and
> others I keep running across), I cannot separate the ability to do a
> simple disk check from the ability to do ALL administrative tasks.
>
> We are trying to put into place a concept of a "System Maintainer" -
> someone who can handle many aspects of system maintenance, but doesn't
> have the keys to the kingdom as it were. Unfortunately, we are being
> thwarted by the security model built into Windows. If anyone has any
> ideas on how to approach this in a Windows (specifically, Vista)
> environment, I'm all ears.
>
> Regards,
>
> Dave
>
Bruce Chambers
Guest
Posts: n/a
 
Re: How to give non-admin user ability to chkdsk drive?
Posted: 06-25-2008, 12:46 AM
Dave R. wrote:
>
>
> We are trying to put into place a concept of a "System Maintainer" -
> someone who can handle many aspects of system maintenance, but doesn't
> have the keys to the kingdom as it were.

Part of the problem is that, for some reason, you're mistakenly
thinking of Chkdsk as some sort of routine maintenance tool. It isn't.
It's designed to find and correct problems with the hard drive
(limited, to be sure) and the file system. It has no preventative
value, at all. All it's routine periodic use would do is unnecessarily
increase the wear and tear on the hard drives.

And granting ordinary (or even power users) the ability to alter the
very foundation on which the OS, applications, and data rests is very
much granting the "keys to the kingdom."


--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
UAC doesn't give me a continue button - can't do anything as admin Chipwich00 Windows Vista Administration 0 02-23-2008 05:00 PM
How to give Full Control to new user kezhu Windows Vista Security 0 05-28-2007 01:43 PM
Installing additional drive, but Windows doesn't give it a drive letter! vharlow1 Customize Windows XP 1 12-17-2003 11:06 PM
lost ability to logon to local Admin account Rick Windows XP Network & Web 0 09-20-2003 02:09 AM
How to give Install Priv to a non Admin user Mike Windows XP Setup 0 09-10-2003 05:51 AM