> create a service that runs the nero executable - run the service with
> the local admin (localsystem might work, too).  Then grant the users
> Start/Stop/Pause permissions for the service.

Seems kind of messy.  Then again, it might work just as well as my
solution:

Under Windows/2000 you can use RUNAS to start a program as another user.
I've done this on my home PC to allow my son to run certain programs
that demand ADMINISTRATOR rights.  In fact, Nero is one of these
programs.

Basically, you setup a specific account to be used as the RUNAS account,
making that account a member of ADMINISTRATORS.  You modify the shortcut
to the application to run "c:\winnt\system32\RUNAS.exe /user:RunNERO
c:\Progra~1\nero\NERO.EXE".  When invoked, a dialog box will appear
prompting for a password.

Some work may be required to secure this account from abuse.  In my home
environment, I deleted everything from the RunNERO profile except for
the STARTUP program group, and that contains a LOGOUT.EXE command, and
restricted login to that single workstation.  More could  (and should)
be done in a production environment.  Fortunately, my son isn't a
hacker, and hasn't figured out how to exploit this vulnerability (yet!)


______________________________________________________________________
Mark A. Medici  | DBM Associates  -=]#[=-  Computer Sales and Services
Sr. Systems Eng.| One Salem Square #104W, Whitehouse Station, NJ 08889
[EMAIL PROTECTED]   | Phone: 908-534-1665  Fax: 908-534-1244  www.dbma.com



> -----Original Message-----
> From: McHugh, Sean [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, October 23, 2001 12:55 PM
> To: [EMAIL PROTECTED]
> Subject: RE: permission for nero
> 
> 
> create a service that runs the nero executable - run the service with
> the local admin (localsystem might work, too).  Then grant the users
> Start/Stop/Pause permissions for the service.
> 
> sean
> 
> -----Original Message-----
> From: SF_Mailinglist [mailto:[EMAIL PROTECTED]]
> Sent: Monday, October 22, 2001 4:28 PM
> To: [EMAIL PROTECTED]
> Subject: permission for nero
> 
> 
> Hi guys,
> I need your help. I have some CD-writer with Nero-Burning ROM 
> as software.
> My OS is Windows 2000. For security reasons I the users to be in the
> Users/PowerUsers groups. I get a message that they don't have enough
> permissions. I cannot give them administrative privileges. 
> The software came
> with the writers - so I have the licences (it was not my 
> decision to buy
> this software). There is no money for another burning software.
> What should I do?
> Thanks in advance
> 
> cheers,
> Michael
> CNA, 6xMCP
> 
> 
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
> 

Reply via email to