Best way to give restricted execute access on pssession to remote user on a server

we have some windows 2008 R2 development environment servers. On these servers we are planning to provide access to developers via PSremoting. We want to restrict the users in such a way that they can only run .bat files present in a certain UNC path. What
is the best way to achieve the same. Can we create a PSSession Configuration for this?
Please note that we are planning to enable WSmanCredSSP on client (it is already enabled on server).
Also, is it possible to give such an access where user can only login to server using powershell's PSsession and not through interactive remote desktop connection.
ApoorvaW

Hi ApoorvaW,
If you want to setup a restricted pssession, please try to set the session configuration with the cmdlet:
Register-PSSessionConfiguration
Securing Session Configurations
You can assign session configurations to users automatically. For example, you may want to restrict the commands in a session that are available to some users. This is done in a two-step-process:
1. Create a new session configuration that restricts the session to only a subset of commands.
2. Change security access permissions so that the intended users can only access the new session configuration.
For more detailed information about restricted session and paremoting security, please refer to these articles:
PowerShell Remoting: How to Restrict User Commands
Restrict Session
If there is anything else regarding ths issue, please feel free to pst back.
Best Regards,
Anna Wang

Similar Messages

Best way to give access to Library folder, etc.

Hello.
I have someone in our studio who needs to access various directories within the root Library folder (mainly for dealing with web/wiki file editing) — what's the best way to give them access to the server for this (assuming they'll be accessing the xserve from another machine on the LAN and not directly logging in on the Xserve itself as it's in a secure room in a rack)?
I tried using File Sharing and creating aliases or symbolic links to the requires locations, but that didn't seem to work.
FYI, all users are set up via an OD Master (if that helps)?
Regards,
Kristin.

Hi Kristin,
What you are describing is a developer having access to files on the server that a running service is using. A common developer situation: modifying and editing files on a remote machine but not in use by the service. The service needs to be restarted to put the modifications into service.
A setup I'm familiar with is more tolerant of the interaction and provides backup in case things go awry. A repository on the server (subversion or git) is setup to accept versions of the file directories used by a service. Then the latest version is checked out to the service directory. The service is stopped and restarted to load this latest version. If things are not working correctly, then a rollback can be performed to restore service to the previous running version. The developer is provided an ssh connection on the lan to keep secure file transfers to and from the repository.
Using a tool such as Capistrano provides the automated mechanism to restart service and load any configuration data that may be required. Rollback is just as simple.
This approach means the service is up as much as possible. Development and testing is accomplished on a remote machine, not the server. Version control is maintained and a backup of known tested files is available for rollback. Lastly, the control of bringing online a new file or capability is allowed in a controlled manner. Security of access to files is limited to those allowed an ssh connection to the repository.
With subversion preloaded on OS 10.5 Server and git easy to install it is a straightforward solution.
HTH,
Harry

Best way to give tablename in create table statement

hi all,
what's the best way to give table name while "create statement" in case of performance..
for eg:
create table tablename(id int,name varchar(20))
a.) tablename
b.) [tablename]
c.) (tablename)
d.) "tablename"
pls its urgent..
thanks in advance..
lucky

>b.) [tablename]
As Naomi pointed it out, the above is dangerous because unintentionally special characters or space can be included and accepted by SQL Server.
Once you introduce special characters in the table name, you have to use [....] forever.
Related QUOTENAME:
http://technet.microsoft.com/en-us/library/ms176114.aspx
a is the best choice.
Kalman Toth Database & OLAP Architect
SELECT Video Tutorials 4 Hours
New Book / Kindle: Exam 70-461 Bootcamp: Querying Microsoft SQL Server 2012

Best way to import data to multiple tables in oracle d.b from sql server

HI All am newbie to Oracle,
What is the Best way to import data to multiple tables in Oracle Data base from sql server?
1)linked server?
2)ssis ?
If possible share me the query to done this task using Linked server?
Regards,
KoteRavindra.

check:
http://www.mssqltips.com/sqlservertip/2011/export-sql-server-data-to-oracle-using-ssis/
      koteravindra
Handle:      koteravindra
Status Level:      Newbie
Registered:      Jan 9, 2013
Total Posts:      4
Total Questions:      3 (3 unresolved)
why so many unresolved questions? Remember to close your threads marking them as answered.

Best way to give access on a table

Guys, i have a requirement by which a SQL server process needs to update a single table within Oracle. What is the most recomended way to give such access ? Is that by creating another user, say XX, granting update on the table to XX and creating private synonym in XX for table A ?
Or better alternatives ?
Many thanks in advance
G

Guys, i have a requirement by which a SQL server process needs to update a single
table within Oracle. What is the most recomended way to give such access ? Is that by
creating another user, say XX, granting update on the table to XX and creating private
synonym in XX for table A ?This is what we do and I think this is a good approach.

What's the best way to be able to access and work on files between new iMacs?

One is used in office downstairs and other is for personal. We want to be able access office documents and work on them upstairs.

There really is no best way, without knowing what you want to do more in-depth it's difficult to recommend. You can turn on iCloud on both machines, you can use Sharing on both and/or you can use a Dropbox account. Please explain in-depth what kind of files you will be sharing and what you are thinking of.

What is best way to give a used iPad to someone?

Buying the new iPad. Want to give my iPad 2 to my wife. What is the best way to do that?

Does she want any of your content on it, and has she got her own iTunes account ? Any purchased content on the iPad will remain tied to your iTunes account, so it will need to be on the computer that she syncs to if she wants to be able to have any of it (so your iTunes account will need to be authorised on that computer).
If she doesn't want any of your current content then you can log out of your account on the iPad by tapping on it in Settings > Store an you can then restoreit to factory defaults via Settings > General > Reset > Erase All Contents And Settings.

Best way to give a default value to a New Column with existing rows

Adding some columns to SQL tables with existing data rows. There are also views created from these tables. The views are used in some report/query software so NULL values are not good. Interested in learning about the best way to set a default value.
These are the ways that I can think of
1) ALTER TABLE using the DEFAULT to add the column and set the default value
++ Adds a constraint which is not terrible. Constraints are just not used much in this shop.
2) ALTER TABLE to add the column then do an UPDATE statement to update the values
++ might be an issue for tables with millions of rows
3) ALTER TABLE to add the column then use ISNULL in the CREATE VIEW

It is a large table with 444 columns and max row size of 2268. 907k records took 1 minute 38 seconds to UPDATE the column. I have about 12 fields to add to this table and about 44 tables (not all this large of course) so it will take some time to
UPDATE. Although ... i just tried updating 3 columns in a single UPDATE and it took 1 minute 36 seconds. So If I did all 12 fields in a single UPDATE it would be about the same time as a single Field. I will think about it.

Best way to show multiple copies of same data to different users

Hi,
I am new to configuring and using Oracle. I have an oracle db installed on a server machine and I loaded it with a set of data. I have multiple users who would all like to access the tables but they need to see unique copies of the data.
What is my best approach? Should I create a new database instance? If so what is the best way to copy data to the new instance?
Any help is greatly appreciated.

Each developer should copy from the 'base' schema to his own the tables he requires to do his work. Give each developer select privileges on the 'base schema' tables so he cannot change them. This way, the developer can refresh his data as needed on his own. Public synonyms for the base schema tables will enable developers to only have to copy tables they wish to modify.
Creating a separate fully loaded schema for each developer is going to create a never ending load of work for you as developers will be constantly asking you to refresh their schemas. Alternatively, you could create an export of production on a schedule and let the developers do the import to their schema when they wish.
Basically, these folks are developers and, IMNSHO, should be managing their own development schemas.

Best way to completely share iPhoto, iMovie and iTunes between 2 users?

Hello everyone
I want to set up my new brandnew iMac (2.66 Intel Core 2) running Leopard the following way: Two accounts (for me and my wife) on the same iMac, no external drive. We want to completely share iPhoto, iMovie and iTunes libraries in a shared folder on the hard disk. That means we need full read, write and edit access to all files and subfolders in this shared folder. We will not use these libraries at the same time.
*What's the best way to do this?*
Thanks in advance for help or for pointing me to where I can find it!
Morgy
(On our old/current system (Panter), achieving this was quite tricky thing! A posting by Scott Radloff explained step by step how to use Netinfo, then Terminal and finally TinkerTool. I hope it's easier now!)

Sharing the iPhoto library via the Shared Folder cannot be done in 10.5.
There are two ways to share, depending on what you mean by 'share'.
If you want the other user to be able to see the pics, but not add to, change or alter your library, then enable Sharing in your iPhoto (Preferences -> Sharing), leave iPhoto running and use Fast User Switching to open the other account. In that account, enable 'Look For Shared Libraries'. Your Library will appear in the other source pane.
Remember iPhoto must be running in both accounts for this to work.
If you want the other user to have the same access to the library as you: to be able to add, edit, organise, keyword etc. then:
Quit iPhoto in both accounts
Move the iPhoto Library Folder to an external HD set to ignore permissions. You could also use a dmg.
In each account in turn: Hold down the option (or alt) key and launch iPhoto. From the resulting dialogue, select 'Choose Library' and navigate to the new library location. From that point on, this will be the default library location. Both accounts will have full access to the library, in fact, both accounts will 'own' it.
However, there is a catch with this system and it is a significant one. iPhoto is not a multi-user app., it does not have the code to negotiate two users simultaneously writing to the database, and trying will cause db corruption. So only one user at a time, and back up, back up back up.
Regards
TD

What is the best way to export/share GarageBand files with a non-mac user?

I have some GB2 files, too big to email, that I want a client to hear and give direction. then I can make the changes and re-export them for him to hear again. What is the best way to do this? IMac seems to be forthcoming about sharing pictures and IMovies but not music files, for understandable reasons. Thanks.
BB

Here's one way, but be sure you understand the privacy policy!

What is the Best Way to Sync iPod nano to a new Computer and User?

what is the best way to sync ipod to a new computer and user?
moving from old mac to new mac - same ipod
- currently won't add music etc. i guess because it is not associated with this new computer
- i don't care if I dump all old contents - if necessary...
BTW: what if it's the same username?

No problem.
What about when I have the same user name on both old and new computers - and right now the new computer sees/syncs the ipod just fine .... but it seems that on another day it might not allow the sync
If it's syncing okay already, then you have nothing to worry about. Anyways, why would it change? It doesn't decide when to. It either syncs or it doesn't depending on the situations circumstances, in which your case, you have nothing to worry about because it's already syncing without issues.
B-rock

Not able to access database from a remote machine using SQL Server Management Studio

Hi,
I have a DB_BOX with SQL Server 2008 R2 installed. I can access the databases on the local machine using SQL Server Management Studio but it is not accessible from other machines, though the machines are in same domain.
I have remote enabled on SQL Server box, TCP enabled, firewall off. I checked with IP Address too, all SQL Server services are running.
The SQL Server log shows the message
The requested service has been stopped or disabled and is unavailable at this time. The connection has been closed.
I get the below message in SSMS from remote machine.
Details of error message are
===================================
Cannot connect to DB_BOX.
===================================
A connection was successfully established with the server, but then an error occurred during the login process. (provider: TCP Provider, error: 0 - The specified network name is no longer available.) (.Net SqlClient Data Provider)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=64&LinkId=20476
Server Name: DB_BOX
Error Number: 64
Severity: 20
State: 0
Program Location:
   at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParserStateObject.ReadSniError(TdsParserStateObject stateObj, UInt32 error)
   at System.Data.SqlClient.TdsParserStateObject.ReadSni(DbAsyncResult asyncResult, TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParserStateObject.ReadNetworkPacket()
   at System.Data.SqlClient.TdsParserStateObject.ReadBuffer()
   at System.Data.SqlClient.TdsParserStateObject.ReadByte()
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)
   at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, Boolean ignoreSniOpenTimeout, Int64 timerExpire, SqlConnection owningObject)
   at System.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(String host, String newPassword, Boolean redirectedUserInstance, SqlConnection owningObject, SqlConnectionString connectionOptions, Int64 timerStart)
   at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(SqlConnection owningObject, SqlConnectionString connectionOptions, String newPassword, Boolean redirectedUserInstance)
   at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, Object providerInfo, String newPassword, SqlConnection owningObject, Boolean redirectedUserInstance)
   at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup)
   at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at Microsoft.SqlServer.Management.SqlStudio.Explorer.ObjectExplorerService.ValidateConnection(UIConnectionInfo ci, IServerType server)
   at Microsoft.SqlServer.Management.UI.ConnectionDlg.Connector.ConnectionThreadUser()

Sorry, missed the message from the errorlog in the original post. You shouldn't have included that big .Net dump that hid the important facts. :-)
My first Google attempt on that message (which I have never seen before) suggests that the TCP Enpoint is stopped, so try this:
ALTER ENDPOINT [TSQL Default TCP]
STATE=STARTED;
Erland Sommarskog, SQL Server MVP, [email protected]
This solves the problem. Thanks...

Is there a way to give permission to access iPhone 5C when you can't through the display? Display is not showing but iPhone 5C is recognized in iTunes through USB.

So display on phone does not show anymore; however, when I plug it into the USB the phone is recognized by iTunes and triggers the permission pop up to access. The only problem is I can't click "Trust" on the iPhone because I don't have a screen that shows it. I can even reset the phone by holding the power and home button. So basically it's give permission with no screen. I have a replacement phone on the way but unfortunately the back up for this phone was deleted during a PC refresh so no backup and that's why I need access to it. Any suggestions would be very helpful.

There is no way to interact with the phone if the screen is not working.
Did you happen to have iCloud backup enabled? If so, you'll be able to restore from an iCloud backup and get at least some of your data back.
~Lyssa

How is the best way to give a movie to someone that does not have a mac

Hi there,
I would like to give my friend the movie I made that he has to send away for university. What are the options of format to give to him even though he does not have a mac or Imovie.
Thanks in advance

Hi
Most probably as many solutions a users.
I would
• Save as QuickTime full Quality .mov - to a DVD - or -
• Make a plain video-DVD
QuickTime player is free to download to PC-Window users as well as Mac-users.
Yours Bengt W

Best way to give restricted execute access on pssession to remote user on a server

Similar Messages

Maybe you are looking for