"Bruce Chambers" <bchambers@xxxxxx> wrote in message
news:uQT2Hba1IHA.2384@xxxxxx
Quote:
> Dave R. wrote: Quote:
>>
>>
>> That's what I was afraid of. Any idea why this would be restricted
>> to administrators only?
>>
>
> Because only administrators should have file system level access to
> the contents of the hard drive; it's not something regular users
> should ever have to do.
>
> The problem with that approach is that it lacks granularity in privilige
assignment. Just because a user can be trusted to do some aspects of
system administration does not necessarily mean they can be trusted to
perform all aspects of system administration. Yet, in this case (and
others I keep running across), I cannot separate the ability to do a
simple disk check from the ability to do ALL administrative tasks.
We are trying to put into place a concept of a "System Maintainer" -
someone who can handle many aspects of system maintenance, but doesn't
have the keys to the kingdom as it were. Unfortunately, we are being
thwarted by the security model built into Windows. If anyone has any
ideas on how to approach this in a Windows (specifically, Vista)
environment, I'm all ears.
Regards,
Dave