/build/static/layout/Breadcrumb_cap_w.png

Administrative Privileges

Does anyone know of any tool that is able to analyze applications during execution and report if the application really requires administrative rights. My environment here is such that over 1K pcs have been discovered to have business users with administrative rights.

0 Comments   [ + ] Show comments

Answers (4)

Posted by: Chipster 16 years ago
Blue Belt
0
Process Monitor: http://www.microsoft.com/technet/sysinternals/SystemInformation/processmonitor.mspx
one of hte best tools out there for this.

It will morning all activity registry and file etc and wil catch those read/write executions.

the best method to do this will be to log on as a standard user, perform a runas on process monitor as an administrator (it requires admin rights to run). Then you run your application as the standard user and when you get error messages from the app, you look at the log to see what the item in question was.
Posted by: AngelD 16 years ago
Red Belt
0
The status you're after is "Access Denied"
Posted by: oofemioo 16 years ago
Blue Belt
0
Thanks for all your replies. I think I am a bit ambitious with the product I require and probably ambiguous with my request.
I am not looking for a FileMon, RegMon, ProcMon- type application. I want something which is able to run an agent on all systems in the enterprise and report back on applications which require administrative privileges in order to execute. Procmon could then be used to track which parts of the system the application requires RW etc access to.

Thanks for all your responses. Please keep them coming.
Posted by: Drye 16 years ago
Senior Yellow Belt
0
Sounds like you should just setup a test machine with all of the corporate software on it and monitor it. I think it would be much easier than what I think you're asking. Procmon will tell you the app that's getting access denied. It should give you what you're looking for.
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ