I haven't tested this, but would granting the "Perform Volume maintenance task" give them this right?
Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 christopher_bod...@glic.com The Guardian Life Insurance Company of America www.guardianlife.com From: Ben Scott <mailvor...@gmail.com> To: "NT System Admin Issues" <ntsysadmin@lyris.sunbelt-software.com> Date: 12/03/2012 12:03 PM Subject: FORMAT without admin Is there a way to grant a user the ability to format hard disks, without granting them other permissions/privileges/rights/etc.? In particular, without Administrator rights? I want our Security dept people be able to format USB flash drives (which are considered hard disks), without needing to grant them full admin (even in a separate account). Under *nix, this is as easy as "chmod g+w /dev/hd*" or similar, but Windows is rather more complicated. There are things like the \Device\Hardisk*\DR* names, which allegedly have security features like ACLs, but I can't find anything useful about how to examine or change said ACLs. XP Pro SP3 and/or Vista Biz SP1. I'll take what I can get. Anyone got a clue they can spare me? -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
<<image/jpeg>>
