![]() |
![]() | ![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
| Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks. |
| |||||||
![]() |
| |
| | #1 (permalink) |
| | How to give non-admin user ability to chkdsk drive? On some Vista Business systems I deploy, I need to be able to give non-admin uers the ability to chkdsk drives. I found the "Perform volume maintenance tasks" user rights policy, but that isn't doing it. Anyone know if it is even possible (I know some things can only be done by Administrators), and if so, how? Regards, Dave |
My System Specs![]() |
| | #2 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message news:uOPD9Qk0IHA.4476@xxxxxx Quote: > On some Vista Business systems I deploy, I need to be able to give > non-admin uers the ability to chkdsk drives. I found the "Perform > volume maintenance tasks" user rights policy, but that isn't doing it. > > Anyone know if it is even possible (I know some things can only be > done by Administrators), and if so, how? > Does anyone know if this can be done, and of so, how? Regards, Dave |
My System Specs![]() |
| | #3 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message news:eX3%23$zw0IHA.4164@xxxxxx Quote: > > "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message > news:uOPD9Qk0IHA.4476@xxxxxx Quote: >> On some Vista Business systems I deploy, I need to be able to give >> non-admin uers the ability to chkdsk drives. I found the "Perform volume >> maintenance tasks" user rights policy, but that isn't doing it. >> >> Anyone know if it is even possible (I know some things can only be done >> by Administrators), and if so, how? >> > Widening the net to include a couple of additional newsgroups... > > Does anyone know if this can be done, and of so, how? > the file system is NTFS and you can't do it on Vista with the file system being NTFS. The only way you can do it is if the file system is FAT32 -- no security. |
My System Specs![]() |
| | #4 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Mr. Arnold" <MR. Arnold@xxxxxx> wrote in message news:esGCddy0IHA.6096@xxxxxx Quote: > > "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message > news:eX3%23$zw0IHA.4164@xxxxxx Quote: >> >> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message >> news:uOPD9Qk0IHA.4476@xxxxxx Quote: >>> On some Vista Business systems I deploy, I need to be able to give >>> non-admin uers the ability to chkdsk drives. I found the "Perform >>> volume maintenance tasks" user rights policy, but that isn't doing >>> it. >>> >>> Anyone know if it is even possible (I know some things can only be >>> done by Administrators), and if so, how? >>> >> Widening the net to include a couple of additional newsgroups... >> >> Does anyone know if this can be done, and of so, how? >> > Even on XP, I don't think you can run ChKdsk without admin rights on > XP if the file system is NTFS and you can't do it on Vista with the > file system being NTFS. The only way you can do it is if the file > system is FAT32 -- no security. > administrators only? Regards, Dave |
My System Specs![]() |
| | #5 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message news:OHl%23NST1IHA.416@xxxxxx Quote: > > "Mr. Arnold" <MR. Arnold@xxxxxx> wrote in message > news:esGCddy0IHA.6096@xxxxxx Quote: >> >> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message >> news:eX3%23$zw0IHA.4164@xxxxxx Quote: >>> >>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message >>> news:uOPD9Qk0IHA.4476@xxxxxx >>>> On some Vista Business systems I deploy, I need to be able to give >>>> non-admin uers the ability to chkdsk drives. I found the "Perform >>>> volume maintenance tasks" user rights policy, but that isn't doing it. >>>> >>>> Anyone know if it is even possible (I know some things can only be done >>>> by Administrators), and if so, how? >>>> >>> >>> Widening the net to include a couple of additional newsgroups... >>> >>> Does anyone know if this can be done, and of so, how? >>> >> Even on XP, I don't think you can run ChKdsk without admin rights on XP >> if the file system is NTFS and you can't do it on Vista with the file >> system being NTFS. The only way you can do it is if the file system is >> FAT32 -- no security. >> > That's what I was afraid of. Any idea why this would be restricted to > administrators only? > |
My System Specs![]() |
| | #6 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Mr. Arnold" <MR. Arnold@xxxxxx> wrote in message news:eoLISUZ1IHA.2084@xxxxxx Quote: > > "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message > news:OHl%23NST1IHA.416@xxxxxx Quote: >> >> "Mr. Arnold" <MR. Arnold@xxxxxx> wrote in message >> news:esGCddy0IHA.6096@xxxxxx Quote: >>> >>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message >>> news:eX3%23$zw0IHA.4164@xxxxxx >>>> >>>> "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message >>>> news:uOPD9Qk0IHA.4476@xxxxxx >>>>> On some Vista Business systems I deploy, I need to be able to give >>>>> non-admin uers the ability to chkdsk drives. I found the "Perform >>>>> volume maintenance tasks" user rights policy, but that isn't doing >>>>> it. >>>>> >>>>> Anyone know if it is even possible (I know some things can only be >>>>> done by Administrators), and if so, how? >>>>> >>>> >>>> Widening the net to include a couple of additional newsgroups... >>>> >>>> Does anyone know if this can be done, and of so, how? >>>> >>> >>> Even on XP, I don't think you can run ChKdsk without admin rights on >>> XP if the file system is NTFS and you can't do it on Vista with the >>> file system being NTFS. The only way you can do it is if the file >>> system is FAT32 -- no security. >>> >> That's what I was afraid of. Any idea why this would be restricted >> to administrators only? >> > Because they are administrators that administer the O/S? Why can't I as an administrator give the ability to do any administrator task to another user without giving them the ability to do ALL administrator tasks? That design seems lacking to me. Regards, Dave |
My System Specs![]() |
| | #7 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Bruce Chambers" <bchambers@xxxxxx> wrote in message news:uQT2Hba1IHA.2384@xxxxxx Quote: > Dave R. wrote: Quote: >> >> >> That's what I was afraid of. Any idea why this would be restricted >> to administrators only? >> > Because only administrators should have file system level access to > the contents of the hard drive; it's not something regular users > should ever have to do. > > assignment. Just because a user can be trusted to do some aspects of system administration does not necessarily mean they can be trusted to perform all aspects of system administration. Yet, in this case (and others I keep running across), I cannot separate the ability to do a simple disk check from the ability to do ALL administrative tasks. We are trying to put into place a concept of a "System Maintainer" - someone who can handle many aspects of system maintenance, but doesn't have the keys to the kingdom as it were. Unfortunately, we are being thwarted by the security model built into Windows. If anyone has any ideas on how to approach this in a Windows (specifically, Vista) environment, I'm all ears. Regards, Dave |
My System Specs![]() |
| | #8 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? Command-line utilities can be run from standard user without prompts if the application is given a manifest assigning highestAvailable. Unfortunately, this may also not give the results you want... The higher privileged application will open in a separate "DOS" window and close without providing the user an opportunity to read any information presented. ChkDsk can be assigned in this method to run on the next boot where the information will be provided to the user, or the logfile that ChkDsk could be reviewed after running, but no protected area sectors can be repaired while run from a standard user. Again, this is probably not what you wanted. Easier would be to setup ChkDsk to run each boot by marking the disk as "dirty" during network initialization. Again, missing the concept. You want to provide the standard user the ability to run certain applications while running Windows. I don't think that exists. Nor did it exist in prior versions. (They were simply running as administrator and you restricted those functions you did not want to give to them.) "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message news:OUHyEef1IHA.2292@xxxxxx Quote: > > "Bruce Chambers" <bchambers@xxxxxx> wrote in message > news:uQT2Hba1IHA.2384@xxxxxx Quote: >> Dave R. wrote: Quote: >>> >>> >>> That's what I was afraid of. Any idea why this would be restricted to >>> administrators only? >>> >> Because only administrators should have file system level access to the >> contents of the hard drive; it's not something regular users should ever >> have to do. >> >> > The problem with that approach is that it lacks granularity in privilige > assignment. Just because a user can be trusted to do some aspects of > system administration does not necessarily mean they can be trusted to > perform all aspects of system administration. Yet, in this case (and > others I keep running across), I cannot separate the ability to do a > simple disk check from the ability to do ALL administrative tasks. > > We are trying to put into place a concept of a "System Maintainer" - > someone who can handle many aspects of system maintenance, but doesn't > have the keys to the kingdom as it were. Unfortunately, we are being > thwarted by the security model built into Windows. If anyone has any > ideas on how to approach this in a Windows (specifically, Vista) > environment, I'm all ears. > > Regards, > > Dave > |
My System Specs![]() |
| | #9 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? "Bruce Chambers" <bchambers@xxxxxx> wrote in message news:ujGMtzl1IHA.5832@xxxxxx Quote: > Dave R. wrote: Quote: >> >> >> We are trying to put into place a concept of a "System Maintainer" - >> someone who can handle many aspects of system maintenance, but >> doesn't have the keys to the kingdom as it were. > > Part of the problem is that, for some reason, you're mistakenly > thinking of Chkdsk as some sort of routine maintenance tool. can be handled by *some* users who have *some*, but not all, of the rights/privileges of system administrators. Quote: > It isn't. It's designed to find and correct problems with the hard > drive (limited, to be sure) and the file system. Quote: > It has no preventative value, at all. Quote: > All it's routine periodic use would do is unnecessarily increase the > wear and tear on the hard drives. Second, if you actually believe this, then you have no idea how a hard drive functions. That's like saying "the routine periodic reading of data from hard drives unnecessarily increases the wear and tear on the hard drives." Quote: > And granting ordinary (or even power users) ability. You should stop trying to divine my intent as you are consistently making incorrect assumptions. Quote: > the ability to alter the very foundation on which the OS, > applications, and data rests is very much granting the "keys to the > kingdom." trust certain users to have. What is it about this that bothers you so much? Regards, Dave |
My System Specs![]() |
| | #10 (permalink) |
| | Re: How to give non-admin user ability to chkdsk drive? Thanks for the constructive reply, Mark. I'll take a closer look at your suggestions and ideas and see if they can get me where I want to go. Regards, Dave "Mark" <jmhonzell@xxxxxx> wrote in message news:B45B8D1E-59F0-4918-A1AA-12D4258D01F6@xxxxxx Quote: > Command-line utilities can be run from standard user without prompts > if the application is given a manifest assigning highestAvailable. > Unfortunately, this may also not give the results you want... > The higher privileged application will open in a separate "DOS" window > and close without providing the user an opportunity to read any > information presented. ChkDsk can be assigned in this method to run on > the next boot where the information will be provided to the user, or > the logfile that ChkDsk could be reviewed after running, but no > protected area sectors can be repaired while run from a standard user. > > Again, this is probably not what you wanted. > Easier would be to setup ChkDsk to run each boot by marking the disk > as "dirty" during network initialization. > Again, missing the concept. You want to provide the standard user the > ability to run certain applications while running Windows. > > I don't think that exists. Nor did it exist in prior versions. (They > were simply running as administrator and you restricted those > functions you did not want to give to them.) > > "Dave R." <dwragle (at) drbsystems (dot) com> wrote in message > news:OUHyEef1IHA.2292@xxxxxx Quote: >> >> "Bruce Chambers" <bchambers@xxxxxx> wrote in message >> news:uQT2Hba1IHA.2384@xxxxxx Quote: >>> Dave R. wrote: >>>> >>>> >>>> That's what I was afraid of. Any idea why this would be restricted >>>> to administrators only? >>>> >>> >>> Because only administrators should have file system level access to >>> the contents of the hard drive; it's not something regular users >>> should ever have to do. >>> >>> >> The problem with that approach is that it lacks granularity in >> privilige assignment. Just because a user can be trusted to do some >> aspects of system administration does not necessarily mean they can >> be trusted to perform all aspects of system administration. Yet, in >> this case (and others I keep running across), I cannot separate the >> ability to do a simple disk check from the ability to do ALL >> administrative tasks. >> >> We are trying to put into place a concept of a "System Maintainer" - >> someone who can handle many aspects of system maintenance, but >> doesn't have the keys to the kingdom as it were. Unfortunately, we >> are being thwarted by the security model built into Windows. If >> anyone has any ideas on how to approach this in a Windows >> (specifically, Vista) environment, I'm all ears. >> >> Regards, >> >> Dave >> |
My System Specs![]() |
![]() |
| Thread Tools | |
| |
Similar Threads | ||||
| Thread | Forum | |||
| Admin rights WITHOUT ability to change security?? | Vista General | |||
| Won't let me chkdsk /f in admin | Vista performance & maintenance | |||
| Re: How to give non-admin user ability to chkdsk drive? | Vista General | |||
| Re: How to give non-admin user ability to chkdsk drive? | Vista installation & setup | |||
| UAC doesn't give me a continue button - can't do anything as admin | Vista account administration | |||