Looking for a GPO for enabling a PGM socket bind without requiring the user to be a local admin

Question

I currently have some software (C#) that uses NetMQ to communicate between multiple hosts on a network. Unfortunately, since we use PGM, windows requires the users to be be local admins on their boxes or the bind fails due to insufficient permissions. I am hoping that there is a GPO that we might be able to set on our domain that gives users the right to bind to these sockets without keeping them full admins on the computers they use.

Answer 1

Hi there,

You can use the below procedures for an administrator to delegate permissions to others using the GPMC so that they can perform some Group Policy administrative tasks.

You can also specify Group Policy to control the behavior of MMC and MMC snap-ins. For example, you can use Group Policy to manage the rights to create, configure, and use MMC consoles, and to control access to individual snap-ins.

Delegate Permissions for Group Policy
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789195(v=ws.11)

Implementing Least-Privilege Administrative Models
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models

--------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--