Rights on files

  • Thread starter Thread starter Ian
  • Start date Start date
I

Ian

We have Windows 2000 Advanced server setup for our users.
It is configured as a domain server

Our users are setup in the users group. However I would
like to have the users be able to run defrag without
having administrator rights to other applications/files.

I have tried to set it through the security settings of
the program but to no avail. It seems that the domain
rights supercede the rights on the system.

Is there a way to set this for only this file and not the
others?

(e-mail address removed)
 
Defrag checks for membership in the administrator group. If the user's not
in the group, defrag will exit.

The best workaround is probably using the task scheduler to run defrag.

A less secure workaround is to have defrag "runas" an administrator. This
is open to exploits, though: if Mr. BlackHat can get it to run something
other than the actual defrag, he owns the machine.
 
Back
Top