Geeks With Blogs

Stan Spotts blog

This stuff drives me nuts. I'm all for hardening servers, and reducing security footprints, but I always want the option to allow me to get work done versus securing my system.

I use Windows Server 2008 R2 as my laptop OS for a number of reasons I don't need to review here. It's pimped out to work like Windows 7 for most things. But my DVD writer is crippled, and evidently it's on purpose:

http://blogs.technet.com/askcore/archive/2010/02/19/windows-server-2008-r2-no-recording-tab-for-cd-dvd-burner.aspx

I don't WANT to log in as the local administrator to burn a damned DVD.  WTF isn't this configurable through the registry, or better yet, group policy?

There are no security settings that I should not have the option to enable or disable.

Posted on Wednesday, March 10, 2010 3:24 PM Windows 2008 R2 | Back to top


Comments on this post: Annoying security "feature" in Windows 2008 R2 burns me, but not DVD's

# re: Annoying security "feature" in Windows 2008 R2 burns me, but not DVD's
Requesting Gravatar...
The reason is clear (and contained directly in your link)

By default accounts other than localsystem\administrator (regardless of the groups it belongs to) on server SKUS are considered to be “remote desktop” and so have the same security restrictions that come with remote desktop sessions.

This is a VERY GOOD policy for a Server [fwiw: I also run 2K8R2 on my laptop, but rather than "pimping" it, I run Win 7 Ultimate in a Hyper-V VM].

Left by TheCPUWizard on Mar 11, 2010 10:03 AM

# re: Annoying security "feature" in Windows 2008 R2 burns me, but not DVD's
Requesting Gravatar...
I fully understand why this is good for a server, but I still think it should be configurable. At least make the ability to burn a DVD by using "run as administrator," like many other administrator-only functions.

Hyper-V doesn't allow me to hibernate, and I'm often in the middle of a code session when I have to pack up. It also reduces the graphics capabilities. It'd be great if Virtual PC let you run a 64-bit guest, but because of these negatives of Hyper-V for laptop use I run VirtualBox.
Left by Stan Spotts on Mar 14, 2010 9:06 PM

Your comment:
 (will show your gravatar)


Copyright © Stan Spotts | Powered by: GeeksWithBlogs.net