LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-11-2016, 07:32 PM   #1
kbentch
LQ Newbie
 
Registered: Jan 2016
Location: Worland, Wyoming
Distribution: Slacker Linux
Posts: 4

Rep: Reputation: Disabled
Smile Linux Profiles Running on Windows Client - Need Administrator Rights


Hi!

I hired someone to setup a Linux server, since the Windows server was creating multiple profiles over and over again. The client was losing data because of the many versions of profiles. Windows appears to do a new profile for clients if anything happens, such as a network delay for example.

With Slackware Linux, there are no more errant profiles. However, in every area, the profiles appear to be set up as Administrator. But when you try to run something - like a software update - the program says you have to have admin rights to continue. Frustrating!

One client now has a compromised (hijacked) browser. I logged on to the machine, not the profile / domain, and cleaned all malware using ADW. But when I logged back in as the profile on the domain, the hijacking program was still there.

Would love some ideas regarding how to truly make the profiles administrator.

The Windows versions are all Windows 7.

I am barely able to add new users and add new computers to the server. I have another Slackware server in my lab. But I am unable to create new users or add new computers to it because for some reason it will not make use of my lab network. Very frustrating. Please let me know your thoughts.
 
Old 01-12-2016, 09:09 AM   #2
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Welcome to LQ!

Help me out here, you want to give admin rights globally to "users" and you know one of them is compromised?
I'm confused further, do you need Linux or Windows help here?
You seem to have lots of "servers".

See also https://www.linuxquestions.org/quest...#faq_lqwelcome

Last edited by Habitual; 01-12-2016 at 09:12 AM.
 
Old 01-12-2016, 09:48 AM   #3
kbentch
LQ Newbie
 
Registered: Jan 2016
Location: Worland, Wyoming
Distribution: Slacker Linux
Posts: 4

Original Poster
Rep: Reputation: Disabled
Habital,

Many thanks for replying! Apologies for the loose description. For several years, a customer struggled with a Windows server box trying to use profiles. They hired my small computer company to resolve the issue. Seemingly whenever Windows felt like it, it would create profile.v2, profile.v3, and so on. I was trying to resolve this issue when I hired a Linux guru.

Installing a Slackware linux box in place of the old Windows server has worked wonders. We set up profiles for each office computer. There are 12 offices with client logins to the Linux domain. They log in well. They do not create random profiles. Things are much better.

The issue: The offices are running Windows 7. They use the Linux box (like magic) to login to. I want the users in each office to have administrative rights on their Windows boxes when they are logged in to the Linux domain. Before the guru left for parts unknown (a long story), he set everything he could find to 'Administrator' rights. But it is impossible to run Java updates, Adobe Updates, ADW, or other programs that need admin rights in order to run.

I can log in to the Windows box, off of the domain, and run all the programs. This has worked well to remove hijacker, malware, viruses, and the like - until now. At this time, I have a client who has a profile that appears to have been compromised, apart from the Windows box. I am frustrated. I know if I could just log her on to the domain and run rKill, ADW, Malwarebytes - etc all would likely be well. But I cannot. I really do not want to create a new profile for her, and abandon this one, as that seems like a work-around. Further, this issue will likely arise in the future.

Another thing - I cannot change the Windows background in these Windows / Linux clients. Changing the background requires admin rights. Very frustrating!

Note that I have years and years of experience in Windows, actually beginning back in DOS days. But I have found it hard to learn Linux. I cannot seem to get to first base with Linux. But that is another topic.... :-).

I suspect there may be a registry edit or some other tweak to resolve this issue. Or it may be in the creation of the user on the domain. I have to use adduser to add new users, and some other program on the Linux server to add new computers to the domain. When I do that, the new profiles are created, new computers can be added, and it seems to work OK, except for this admin privilege issue.

Please let me know your thoughts.

Best,
KBentch
 
Old 01-12-2016, 11:20 AM   #4
grail
LQ Guru
 
Registered: Sep 2009
Location: Perth
Distribution: Manjaro
Posts: 9,999

Rep: Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190Reputation: 3190
Further to the above, it would also help to know what sort of network we are working with, ie. are we talking Active Directory, LDAP, mix, other?

Another link to help: http://www.catb.org/~esr/faqs/smart-questions.html

Remember that the more detail you can supply the easier it is to assist. Currently you have only provided a cursory overview and the details are little to not at all
 
Old 01-12-2016, 01:29 PM   #5
kbentch
LQ Newbie
 
Registered: Jan 2016
Location: Worland, Wyoming
Distribution: Slacker Linux
Posts: 4

Original Poster
Rep: Reputation: Disabled
Smile Answers to questions

Well, I do not know if it is active directory or not. I know it uses Samba. There is a domain. The user must have a username / password combo to login to the domain. Their computer name must be added as well, using another command. I must adduser and then add the computer (via Samba I believe) to put a new user and computer on the domain.

I need to go to that customer site in the next couple of days. How would I tell if it was AD or not? I am struggling trying to use Linux.... I feel pretty blind trying to look around and see what is actually happening. My level of Linux expertise is low, though I have provided various levels of support on a very narrow range of subjects.

Thanks!!
KBentch
 
Old 01-12-2016, 03:59 PM   #6
kbentch
LQ Newbie
 
Registered: Jan 2016
Location: Worland, Wyoming
Distribution: Slacker Linux
Posts: 4

Original Poster
Rep: Reputation: Disabled
Habitual,

I did respond to your questions... but for some reason the reply did not appear. I may have done something wrong... You wrote:

==================================================
Welcome to LQ!

Help me out here, you want to give admin rights globally to "users" and you know one of them is compromised?
I'm confused further, do you need Linux or Windows help here?
You seem to have lots of "servers".
==================================================

Originally, a customer had a Windows server. A domain had previously been set up. User profiles were in use. The desire was that office staff could log in to any computer and see their profile. However, there was something wrong with the setup in that Windows would automatically (whimsically) create new profiles for users over and over again. People were losing their files and information. My small company was retained to resolve this issue.

Around this same time, a tech that I hired was a Linux guru. He set up a Slackware server to replace the Windows server. All of the office computers are running Windows 7. The new installation appears to have resolved the issue of automatic profile creation. However, for some reason, if you try to run an update, change the background, or run a program such as ADW on the client-side, it says you need Administrator rights. I need users to have admin rights. He has since moved on, and I need to resolve this issue.

I can login to the local machine as an admin rights user, no problem. From there, I can perform maintenance, clean ups, etc. However, I cannot run any such program after logging in to the domain. I cannot even change the computer background on the Windows box when it is logged in to the domain.

Please let me know your thoughts.

Best,
KBentch
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Lost administrator rights prashant.saraf Ubuntu 14 01-22-2012 06:17 PM
roaming profiles on samba ; how can rights be created on the fly ? knuck71 Linux - Server 1 02-12-2009 04:13 AM
LINUX SAMBA SERVER - Temporary domain admin rights for network windows client user. jcdole Linux - Server 0 01-07-2008 02:44 PM
Remote Administrator Tool with Linux client and Windows Server WarlockofVirgo Linux - Security 3 04-19-2007 09:27 PM
Administrator rights in Win2k workstations Damian-MLA.com Linux - Networking 3 09-16-2004 05:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:24 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration