Linux Profiles Running on Windows Client - Need Administrator Rights
Linux - NewbieThis Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place!
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Linux Profiles Running on Windows Client - Need Administrator Rights
Hi!
I hired someone to setup a Linux server, since the Windows server was creating multiple profiles over and over again. The client was losing data because of the many versions of profiles. Windows appears to do a new profile for clients if anything happens, such as a network delay for example.
With Slackware Linux, there are no more errant profiles. However, in every area, the profiles appear to be set up as Administrator. But when you try to run something - like a software update - the program says you have to have admin rights to continue. Frustrating!
One client now has a compromised (hijacked) browser. I logged on to the machine, not the profile / domain, and cleaned all malware using ADW. But when I logged back in as the profile on the domain, the hijacking program was still there.
Would love some ideas regarding how to truly make the profiles administrator.
The Windows versions are all Windows 7.
I am barely able to add new users and add new computers to the server. I have another Slackware server in my lab. But I am unable to create new users or add new computers to it because for some reason it will not make use of my lab network. Very frustrating. Please let me know your thoughts.
Help me out here, you want to give admin rights globally to "users" and you know one of them is compromised?
I'm confused further, do you need Linux or Windows help here?
You seem to have lots of "servers".
Many thanks for replying! Apologies for the loose description. For several years, a customer struggled with a Windows server box trying to use profiles. They hired my small computer company to resolve the issue. Seemingly whenever Windows felt like it, it would create profile.v2, profile.v3, and so on. I was trying to resolve this issue when I hired a Linux guru.
Installing a Slackware linux box in place of the old Windows server has worked wonders. We set up profiles for each office computer. There are 12 offices with client logins to the Linux domain. They log in well. They do not create random profiles. Things are much better.
The issue: The offices are running Windows 7. They use the Linux box (like magic) to login to. I want the users in each office to have administrative rights on their Windows boxes when they are logged in to the Linux domain. Before the guru left for parts unknown (a long story), he set everything he could find to 'Administrator' rights. But it is impossible to run Java updates, Adobe Updates, ADW, or other programs that need admin rights in order to run.
I can log in to the Windows box, off of the domain, and run all the programs. This has worked well to remove hijacker, malware, viruses, and the like - until now. At this time, I have a client who has a profile that appears to have been compromised, apart from the Windows box. I am frustrated. I know if I could just log her on to the domain and run rKill, ADW, Malwarebytes - etc all would likely be well. But I cannot. I really do not want to create a new profile for her, and abandon this one, as that seems like a work-around. Further, this issue will likely arise in the future.
Another thing - I cannot change the Windows background in these Windows / Linux clients. Changing the background requires admin rights. Very frustrating!
Note that I have years and years of experience in Windows, actually beginning back in DOS days. But I have found it hard to learn Linux. I cannot seem to get to first base with Linux. But that is another topic.... :-).
I suspect there may be a registry edit or some other tweak to resolve this issue. Or it may be in the creation of the user on the domain. I have to use adduser to add new users, and some other program on the Linux server to add new computers to the domain. When I do that, the new profiles are created, new computers can be added, and it seems to work OK, except for this admin privilege issue.
Remember that the more detail you can supply the easier it is to assist. Currently you have only provided a cursory overview and the details are little to not at all
Well, I do not know if it is active directory or not. I know it uses Samba. There is a domain. The user must have a username / password combo to login to the domain. Their computer name must be added as well, using another command. I must adduser and then add the computer (via Samba I believe) to put a new user and computer on the domain.
I need to go to that customer site in the next couple of days. How would I tell if it was AD or not? I am struggling trying to use Linux.... I feel pretty blind trying to look around and see what is actually happening. My level of Linux expertise is low, though I have provided various levels of support on a very narrow range of subjects.
I did respond to your questions... but for some reason the reply did not appear. I may have done something wrong... You wrote:
==================================================
Welcome to LQ!
Help me out here, you want to give admin rights globally to "users" and you know one of them is compromised?
I'm confused further, do you need Linux or Windows help here?
You seem to have lots of "servers".
==================================================
Originally, a customer had a Windows server. A domain had previously been set up. User profiles were in use. The desire was that office staff could log in to any computer and see their profile. However, there was something wrong with the setup in that Windows would automatically (whimsically) create new profiles for users over and over again. People were losing their files and information. My small company was retained to resolve this issue.
Around this same time, a tech that I hired was a Linux guru. He set up a Slackware server to replace the Windows server. All of the office computers are running Windows 7. The new installation appears to have resolved the issue of automatic profile creation. However, for some reason, if you try to run an update, change the background, or run a program such as ADW on the client-side, it says you need Administrator rights. I need users to have admin rights. He has since moved on, and I need to resolve this issue.
I can login to the local machine as an admin rights user, no problem. From there, I can perform maintenance, clean ups, etc. However, I cannot run any such program after logging in to the domain. I cannot even change the computer background on the Windows box when it is logged in to the domain.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.