Print Page | Close Window

Migration for users without administrative rights

Printed From: ForensiT
Category: ForensiT Support
Forum Name: Domain Migration
Forum Description: User Profile Wizard questions, suggestions, comments and bug reports
URL: https://forum.ForensiT.com/forum_posts.asp?TID=1656
Printed Date: 28 Mar 2024 at 9:30am
Software Version: Web Wiz Forums 12.03 - http://www.webwizforums.com


Topic: Migration for users without administrative rights
Posted By: matraksis
Subject: Migration for users without administrative rights
Date Posted: 24 Oct 2018 at 3:44am
Hello
Im using corporate edition 3.14, machines are Win10 1809. And single EXE migration. When I try to use that exe for users which have administrative rights - it works (even with UAC enabled).
But when user is not local admins group's member, when exe is started - we have to provide any administrative rights. Then migration fails and message in logs are "The specified <LocalAdmin> account domain\xxxxx does not have elevated permissions"

How to migrate machines without administrative rights for end user ???
Thanks !

-------------
Piotr Kania



Replies:
Posted By: zep042
Date Posted: 07 Nov 2018 at 11:42am
I am having the same problem. Have you found a solution yet?

-------------
Thanks,
Dan


Posted By: matraksis
Date Posted: 09 Nov 2018 at 8:23am
The only workaround solution I got from support is :
- Change migration scope for ALL accounts (not Logged on only).
- Run this tool as LOCAL SYSTEM credentials - by remote connection action f.e. Psexec -s
or to use any central tool for software management (generally it should start all packages as SYSTEM)

We've decided to add all domain users into local administrators group ONLY for the migration time.



-------------
Piotr Kania


Posted By: Support
Date Posted: 10 Nov 2018 at 2:41am
Seriously?

The whole point of User Account Control is that just because your are running as an Administrator does not mean that you have elevated administrator permissions. It is one of Microsoft's attempts to save you from yourself.

https://forensit.blogspot.com/2007/02/ - Here is a near twelve year-old post that explains how this works. Nothing has changed.

Given the widespread misunderstanding of UAC, we will be making changes to User Profile Wizard to make running as an Administrator more user-friendly, but we have our heads in our hands.



Posted By: mwinberry
Date Posted: 14 Dec 2018 at 3:00pm
I've just run into this today myself, using the <LocalAdmin> element in the config file generated by the wizard, calling the executable with a Powershell script that's launched elevated. On my Win10 (1803) workgroup test machine, I've created a local user account, added it to the local admin group, logged in and made sure that I've got admin rights, and get the same error in the log about not having elevated permissions. If I change the element via the Kit to contain the credentials for the built-in administrator account, it works. I'll try using psexec and running as system.



Print Page | Close Window

Forum Software by Web Wiz Forums® version 12.03 - http://www.webwizforums.com
Copyright ©2001-2019 Web Wiz Ltd. - https://www.webwiz.net