Novell/NT 4.0

[King Grover]

I'm not sure exactly where to post this, but What I need to know is if there is a way to allow a certain user of a NT box on our Novell network to have admin type powers on the workstation without actually adding him to the Admin group on the box.

more info....

User logs into novell and then logs into local machine. novell launcher (Zenworks) initiates and it cannot process certain registy settings unless the local admin is logged in. This machine has to be setup this way with the local NT login.

Any ideas?

[ShadowKing]

Yes, it is possible, but why would you want to do that? Are you trying to be a "stealth" administrator? Why not just add yourself to the local admins group?

It is actually possible to give yourself GREATER than administrative priviledges if you know where to go...

[King Grover]

The reason is this: They have a general user login there called engtech. Tis user logs in and performs the everyday tasks of running enging specs on the machine and that is it. When the launcher comes up it loads certain registry entries everytime, related to internet restrictions. The supervisor in that area does not want the engtech user to have admin powers on the local machine (prevent games and non-workrelated stuff). however, the only way to prevent these errors from appearing is to log on as admin. I personally do not care if engtech is admin or not. In fact, I am planning on making them admin and not telling the supervisor just so I can close this call. I was just wondering if there is another way to do this without actually making the generic user an admin to the local machine.

[MacGyver]

give the engtech user a separate login script with no call to the Novell Application Launcher

[King Grover]

I just finished the call, I gave engtech local admin right. Your idea is a good one, Macgyver, but unfortunatly, they need to use the launcher to bring up all the applications one uses in a normal day.

Thanks for the responses.

[condor]

the only way to do what you need in an NT box is with a domain.

if all the NT computers login to an NT domain the domain administrators groups is automatically in the local administrators group of every NT machine.

[ShadowKing]

OK, I tend to get a little concerned when someone wants to get non-obvious admin priveledges, and (no offence Grov) I wasn't too sure how legit your request was. <IMG SRC="smilies/wink.gif" border="0">

If you go into User Mangler and click the Account Rights or Priveledges??? then you can assign rights to an account, just like they are assigned to the groups. You can even give that user the "Act as part of the OS" right!!! Basically everything he does is handled as a system process... You can give them admin rights without actually putting them in the admin group...

[cordon]

The other option (althouhg painfully slow and fiddly) would be:
create an account for the eng person, Find all the registry keys that the launcher wants to use and give the eng account access to them.

This may take hours or minutes depending on the documentation for the launcher is like. It does have the advantage of not providing the user with local admin status.