Device manager access for non admins
0
Windows 7, 64bit.
Is it possible to allow non admins access to edit the device manager?
Currently when logged in as a non admin and I try to access the device manager I see the following;
I have tried to make the changes in gredit.msc but they don't seem to make any difference.
local computer policy > computer configuration > windows settings >
security settings > local policies > user rights assignment > Load and
unload device drivers > add specific user/group
The only thing that works is by adding my non admin user into the admin user group, this works fine. I'd rather not do this though, I'd prefer to give them access to the device manager only.
Any advice is appreciated.
windows-7 group-policy device-manager administration gpedit
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
|
show 1 more comment
0
Windows 7, 64bit.
Is it possible to allow non admins access to edit the device manager?
Currently when logged in as a non admin and I try to access the device manager I see the following;
I have tried to make the changes in gredit.msc but they don't seem to make any difference.
local computer policy > computer configuration > windows settings >
security settings > local policies > user rights assignment > Load and
unload device drivers > add specific user/group
The only thing that works is by adding my non admin user into the admin user group, this works fine. I'd rather not do this though, I'd prefer to give them access to the device manager only.
Any advice is appreciated.
windows-7 group-policy device-manager administration gpedit
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
Changing the local group policy will have zero effect if the machine is connected to a domain. Is that the case? I currently have access to the device manager, and I am logged into a domain controlled machine, as a normal user. So is it possible: YES
– Ramhound
Feb 11 '16 at 17:14
It's connected to an AD domain yes. However I have full admin control over the PC
– jonboy
Feb 11 '16 at 17:15
You are a local user. You being a local Administrator on the machine means nothing if you are a normal user on the domain itself. A group domain policy overrides a local group policy always. Relevant Microsoft Documentation
– Ramhound
Feb 11 '16 at 17:17
So is there any way I can resolve my issue?
– jonboy
Feb 12 '16 at 9:06
As a non-administrator domain user, no, request your role be changed to an administrator
– Ramhound
Feb 12 '16 at 18:03
|
show 1 more comment
0
0
0
1
Windows 7, 64bit.
Is it possible to allow non admins access to edit the device manager?
Currently when logged in as a non admin and I try to access the device manager I see the following;
I have tried to make the changes in gredit.msc but they don't seem to make any difference.
local computer policy > computer configuration > windows settings >
security settings > local policies > user rights assignment > Load and
unload device drivers > add specific user/group
The only thing that works is by adding my non admin user into the admin user group, this works fine. I'd rather not do this though, I'd prefer to give them access to the device manager only.
Any advice is appreciated.
windows-7 group-policy device-manager administration gpedit
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
Windows 7, 64bit.
Is it possible to allow non admins access to edit the device manager?
Currently when logged in as a non admin and I try to access the device manager I see the following;
I have tried to make the changes in gredit.msc but they don't seem to make any difference.
local computer policy > computer configuration > windows settings >
security settings > local policies > user rights assignment > Load and
unload device drivers > add specific user/group
The only thing that works is by adding my non admin user into the admin user group, this works fine. I'd rather not do this though, I'd prefer to give them access to the device manager only.
Any advice is appreciated.
windows-7 group-policy device-manager administration gpedit
windows-7 group-policy device-manager administration gpedit
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
edited Feb 12 '16 at 9:09
jonboy
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
asked Feb 11 '16 at 17:11
jonboyjonboy
164111
164111
Changing the local group policy will have zero effect if the machine is connected to a domain. Is that the case? I currently have access to the device manager, and I am logged into a domain controlled machine, as a normal user. So is it possible: YES
– Ramhound
Feb 11 '16 at 17:14
It's connected to an AD domain yes. However I have full admin control over the PC
– jonboy
Feb 11 '16 at 17:15
You are a local user. You being a local Administrator on the machine means nothing if you are a normal user on the domain itself. A group domain policy overrides a local group policy always. Relevant Microsoft Documentation
– Ramhound
Feb 11 '16 at 17:17
So is there any way I can resolve my issue?
– jonboy
Feb 12 '16 at 9:06
As a non-administrator domain user, no, request your role be changed to an administrator
– Ramhound
Feb 12 '16 at 18:03
|
show 1 more comment
Changing the local group policy will have zero effect if the machine is connected to a domain. Is that the case? I currently have access to the device manager, and I am logged into a domain controlled machine, as a normal user. So is it possible: YES
– Ramhound
Feb 11 '16 at 17:14
It's connected to an AD domain yes. However I have full admin control over the PC
– jonboy
Feb 11 '16 at 17:15
You are a local user. You being a local Administrator on the machine means nothing if you are a normal user on the domain itself. A group domain policy overrides a local group policy always. Relevant Microsoft Documentation
– Ramhound
Feb 11 '16 at 17:17
So is there any way I can resolve my issue?
– jonboy
Feb 12 '16 at 9:06
As a non-administrator domain user, no, request your role be changed to an administrator
– Ramhound
Feb 12 '16 at 18:03
Changing the local group policy will have zero effect if the machine is connected to a domain. Is that the case? I currently have access to the device manager, and I am logged into a domain controlled machine, as a normal user. So is it possible: YES
– Ramhound
Feb 11 '16 at 17:14
Changing the local group policy will have zero effect if the machine is connected to a domain. Is that the case? I currently have access to the device manager, and I am logged into a domain controlled machine, as a normal user. So is it possible: YES
– Ramhound
Feb 11 '16 at 17:14
It's connected to an AD domain yes. However I have full admin control over the PC
– jonboy
Feb 11 '16 at 17:15
It's connected to an AD domain yes. However I have full admin control over the PC
– jonboy
Feb 11 '16 at 17:15
You are a local user. You being a local Administrator on the machine means nothing if you are a normal user on the domain itself. A group domain policy overrides a local group policy always. Relevant Microsoft Documentation
– Ramhound
Feb 11 '16 at 17:17
You are a local user. You being a local Administrator on the machine means nothing if you are a normal user on the domain itself. A group domain policy overrides a local group policy always. Relevant Microsoft Documentation
– Ramhound
Feb 11 '16 at 17:17
So is there any way I can resolve my issue?
– jonboy
Feb 12 '16 at 9:06
So is there any way I can resolve my issue?
– jonboy
Feb 12 '16 at 9:06
As a non-administrator domain user, no, request your role be changed to an administrator
– Ramhound
Feb 12 '16 at 18:03
As a non-administrator domain user, no, request your role be changed to an administrator
– Ramhound
Feb 12 '16 at 18:03
|
show 1 more comment
1 Answer
1
active
oldest
votes
2
Try this im Curious.
If it does not work let me know I dont have a non admin account at my work desk.
Open a Text file and save the code below as DeviceManger.bat
@echo off
:: BatchGotAdmin
:-------------------------------------
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%system32cacls.exe" "%SYSTEMROOT%system32configsystem"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%getadmin.vbs"
"%temp%getadmin.vbs"
del "%temp%getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
:--------------------------------------
cls
echo.
echo Start as admin:
echo /------------------
echo # 1. Device Manager#
echo ------------------/
echo.
set /p run=
if %run%==1 (
set run="devmgmt"
)
%run%
Run the .bat and press 1 and hit Enter.
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1038626%2fdevice-manager-access-for-non-admins%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
2
Try this im Curious.
If it does not work let me know I dont have a non admin account at my work desk.
Open a Text file and save the code below as DeviceManger.bat
@echo off
:: BatchGotAdmin
:-------------------------------------
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%system32cacls.exe" "%SYSTEMROOT%system32configsystem"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%getadmin.vbs"
"%temp%getadmin.vbs"
del "%temp%getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
:--------------------------------------
cls
echo.
echo Start as admin:
echo /------------------
echo # 1. Device Manager#
echo ------------------/
echo.
set /p run=
if %run%==1 (
set run="devmgmt"
)
%run%
Run the .bat and press 1 and hit Enter.
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
add a comment |
2
Try this im Curious.
If it does not work let me know I dont have a non admin account at my work desk.
Open a Text file and save the code below as DeviceManger.bat
@echo off
:: BatchGotAdmin
:-------------------------------------
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%system32cacls.exe" "%SYSTEMROOT%system32configsystem"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%getadmin.vbs"
"%temp%getadmin.vbs"
del "%temp%getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
:--------------------------------------
cls
echo.
echo Start as admin:
echo /------------------
echo # 1. Device Manager#
echo ------------------/
echo.
set /p run=
if %run%==1 (
set run="devmgmt"
)
%run%
Run the .bat and press 1 and hit Enter.
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
add a comment |
2
2
2
Try this im Curious.
If it does not work let me know I dont have a non admin account at my work desk.
Open a Text file and save the code below as DeviceManger.bat
@echo off
:: BatchGotAdmin
:-------------------------------------
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%system32cacls.exe" "%SYSTEMROOT%system32configsystem"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%getadmin.vbs"
"%temp%getadmin.vbs"
del "%temp%getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
:--------------------------------------
cls
echo.
echo Start as admin:
echo /------------------
echo # 1. Device Manager#
echo ------------------/
echo.
set /p run=
if %run%==1 (
set run="devmgmt"
)
%run%
Run the .bat and press 1 and hit Enter.
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
Try this im Curious.
If it does not work let me know I dont have a non admin account at my work desk.
Open a Text file and save the code below as DeviceManger.bat
@echo off
:: BatchGotAdmin
:-------------------------------------
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%system32cacls.exe" "%SYSTEMROOT%system32configsystem"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%getadmin.vbs"
"%temp%getadmin.vbs"
del "%temp%getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
:--------------------------------------
cls
echo.
echo Start as admin:
echo /------------------
echo # 1. Device Manager#
echo ------------------/
echo.
set /p run=
if %run%==1 (
set run="devmgmt"
)
%run%
Run the .bat and press 1 and hit Enter.
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
answered Feb 12 '16 at 9:17
NetworkKingPinNetworkKingPin
2,02811122
2,02811122
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
add a comment |
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Thanks @NetworkKingPin - I'm very keen to try this! Can you tell me what this does? Before I mess up my PC completely lol
– jonboy
Feb 12 '16 at 9:23
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
Basically it Pushes you to get admin privileges if you do not have them already. The code is safe i use it very often to elevate my batch scripts in my work place. First it tries to get admin access if denied it provides it temp Admin Access. And it wont kill your pc.
– NetworkKingPin
Feb 12 '16 at 9:24
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
There is nothing in that script that would change the user group of a user
– Ramhound
Feb 12 '16 at 18:02
add a comment |
draft saved
draft discarded
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1038626%2fdevice-manager-access-for-non-admins%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Changing the local group policy will have zero effect if the machine is connected to a domain. Is that the case? I currently have access to the device manager, and I am logged into a domain controlled machine, as a normal user. So is it possible: YES
– Ramhound
Feb 11 '16 at 17:14
It's connected to an AD domain yes. However I have full admin control over the PC
– jonboy
Feb 11 '16 at 17:15
You are a local user. You being a local Administrator on the machine means nothing if you are a normal user on the domain itself. A group domain policy overrides a local group policy always. Relevant Microsoft Documentation
– Ramhound
Feb 11 '16 at 17:17
So is there any way I can resolve my issue?
– jonboy
Feb 12 '16 at 9:06
As a non-administrator domain user, no, request your role be changed to an administrator
– Ramhound
Feb 12 '16 at 18:03