[dba-Tech] Detrude?

[John Bartow]

Hi Gustav,
I refer to it as "standardizing". Its known as a standard account and that's currently as much as the end users would see in their settings.

John B
-----Original Message-----
From: dba-Tech <dba-tech-bounces+jbartow=winhaven.net at databaseadvisors.com> On Behalf Of Gustav Brock via dba-Tech
Sent: Monday, December 06, 2021 2:59 AM
To: Discussion of Hardware and Software issues <dba-tech at databaseadvisors.com>
Cc: Gustav Brock <gustav at cactus.dk>
Subject: Re: [dba-Tech] Detrude?

Hi Stuart

Oh, those links make good sense as they are about elevating the "privileges of a user account", not the user account as such. Also, the elevated privileges are temporary - to carry out a task, even for an admin account - which means there will be no de-elevating to take hand of, as that will happen automatically.

So, I had got it wrong. You don't elevate a user account; you elevate the privileges of a user account.
That's different from promoting or demoting a user account.

Thanks for the clarification.

/gustav

-----Oprindelig meddelelse-----
Fra: dba-Tech <dba-tech-bounces+gustav=cactus.dk at databaseadvisors.com> På vegne af Stuart McLachlan
Sendt: 6. december 2021 09:23
Til: Discussion of Hardware and Software issues <dba-tech at databaseadvisors.com>
Emne: Re: [dba-Tech] Detrude?

The problem is that Microsoft like the word "elevate" so it's in common use and people generally know exactly what you mean.

Typically:
https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/elevated-privileges-in-sh
arepoint-add-ins

https://docs.microsoft.com/en-us/windows/win32/msi/installing-a-package-with-elevated-privi
leges-for-a-non-admin

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/
user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval
-mode

https://docs.microsoft.com/en-us/power-platform/admin/prevent-elevation-security-role-privil
ege

And many, many more....



On 6 Dec 2021 at 7:39, Gustav Brock via dba-Tech wrote:

> Perhaps it would be better to skip "elevate" (which sounds a bit 
> "physical" to me) and, instead, talk about promoting and demoting user 
> accounts. I found one reference:
> 
> https://www.top-password.com/blog/how-to-promote-a-standard-user-accou
> nt-to-administrator-without-logging-in-to-windows/
> 
> You wouldn't, I guess, not even temporarily, elevate an employee but rather promote him/her.
> 
> Am I right?
> 
> /gustav
_______________________________________________
dba-Tech mailing list
dba-Tech at databaseadvisors.com
https://databaseadvisors.com/mailman/listinfo/dba-tech
Website: http://www.databaseadvisors.com