{"action":"closed","issue":{"url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/35","labels_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/35/labels{/name}","comments_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/35/comments","events_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/35/events","html_url":"https://github.com/TAMUArch/cookbook.windows_ad/issues/35","id":54999429,"number":35,"title":"Managing AD objects during \"normal\" chef-run","user":{"login":"miguelaferreira","id":4670993,"avatar_url":"https://avatars.githubusercontent.com/u/4670993?v=3","gravatar_id":"","url":"https://api.github.com/users/miguelaferreira","html_url":"https://github.com/miguelaferreira","followers_url":"https://api.github.com/users/miguelaferreira/followers","following_url":"https://api.github.com/users/miguelaferreira/following{/other_user}","gists_url":"https://api.github.com/users/miguelaferreira/gists{/gist_id}","starred_url":"https://api.github.com/users/miguelaferreira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/miguelaferreira/subscriptions","organizations_url":"https://api.github.com/users/miguelaferreira/orgs","repos_url":"https://api.github.com/users/miguelaferreira/repos","events_url":"https://api.github.com/users/miguelaferreira/events{/privacy}","received_events_url":"https://api.github.com/users/miguelaferreira/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-21T10:07:08Z","updated_at":"2015-02-13T15:13:58Z","closed_at":"2015-02-13T15:13:58Z","body":"Hi,\r\n\r\nThis cookbook works fine to create and mange AD objects as long as the user running chef-client has domain admin rights.\r\nHowever, in the \"normal\" chef-client runs  (i.e. started by the timer) the user that runs typically has read access to AD.\r\n\r\nThe obvious solution seem to be raising the AD privileges of the user running chef-client, but that might trigger some alarms from security policies, etc. Another one would be, temporarily raising privileges just for this one thing, a sort of windows equivalent to the linux `sudo` command.\r\n\r\n\r\nHas anyone using this cookbook thought of this issue? Any ideas on how to fix it?"}}