Programs/Regisrty that need admin rights. Is there a way around this ?

[Terry]

We are implementing a new Program across our network. I
found out from the Manufacture(Siemens) that the program
needs admin rights to work properly. This Admin can be to
the local machine or the Domain.

Is there some way(configuration) to put all users in a
security group or something to this and give the security
group only access to this program and nothing else? If
so, How?

or

Would a Two forest model work with a single domain in
each. One forest model would consist of a forest and
single domain containing the SOPMS application and data
and the other Forest and domain would contain all other
resources(email, web, etc...). A trust would be
implemented between the domains. The users would have
admin rights to the SOPMS Forest/Domain and normal rights
to the other Forest/domain. If this would work Do you
know the steps in creating such a complicated Forest with
users and groups?

Anyone, The help would be greatly appreciated. Both
RiS/PACS sytem the company has looked at purchasing have
told us the same thing about admin rights for the users
while they are using thier programs.

Please Advise

Thanks in advance.

Terry

 

[Ray at]

We are implementing a new Program across our network. I
found out from the Manufacture(Siemens) that the program
needs admin rights to work properly. This Admin can be to
the local machine or the Domain.

This is completely unacceptable, and I would expect much better from a
company as large as Siemens. I would try to find out from them exactly why
people need admin rights. Is it for reading/writing to certain registry
keys? Paths? Something else? And then try to handle those individual
needs. If they don't provide a solution, ask for a refund and find software
that is security-conscious. I can tell you that where I work, this would
never fly.

Ray at home

 

[Ray at]

We are implementing a new Program across our network. I
found out from the Manufacture(Siemens) that the program
needs admin rights to work properly. This Admin can be to
the local machine or the Domain.

This is completely unacceptable, and I would expect much better from a
company as large as Siemens. I would try to find out from them exactly why
people need admin rights. Is it for reading/writing to certain registry
keys? Paths? Something else? And then try to handle those individual
needs. If they don't provide a solution, ask for a refund and find software
that is security-conscious. I can tell you that where I work, this would
never fly.

Ray at home

 

[Terry]

-----Original Message-----



This is completely unacceptable, and I would expect much better from a
company as large as Siemens. I would try to find out from them exactly why
people need admin rights. Is it for reading/writing to certain registry
keys? Paths? Something else? And then try to handle those individual
needs. If they don't provide a solution, ask for a refund and find software
that is security-conscious. I can tell you that where I work, this would
never fly.

Ray at home


.
Thank You

Terry

 

[Terry]

-----Original Message-----



This is completely unacceptable, and I would expect much better from a
company as large as Siemens. I would try to find out from them exactly why
people need admin rights. Is it for reading/writing to certain registry
keys? Paths? Something else? And then try to handle those individual
needs. If they don't provide a solution, ask for a refund and find software
that is security-conscious. I can tell you that where I work, this would
never fly.

Ray at home


.
Thank You

Terry