Re: Power User Can't Install Software
From: x y (levinson_k@excite.com)
Date: 01/25/03
- Next message: Joe Richards [MVP]: "Re: Is It Necessary To Include A DBA in the Administrator's Group?"
- Previous message: Joe Richards [MVP]: "Re: LogonUser(..)"
- In reply to: Ralph D. Worgul: "Re: Power User Can't Install Software"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <levinson_k@excite.com> Date: Sat, 25 Jan 2003 11:06:10 -0500
Agreed. If you use REGEDT32 to look at the permissions on HKLM or Windows
Explorer to look at the permissions on windowsroot\system32 and you'll see
Administrators and not Power Users have write permission. Possibly enabling
auditing to see what permissions are missing and changing the permissions in
the necessary location might help you install some applications
successfully, but this is probably not the best solution for all apps
[installing with some method that gives administrator privileges is probably
best].
The Runas command might be one possibility, though this may not be 100%
secure and could cause a security vulnerability.
http://securityadmin.info/faq.htm#auditing
http://securityadmin.info/faq.htm#runas
"Ralph D. Worgul" <rworgul@hotmail.com> wrote in message
news:ej#YRPDxCHA.2512@TK2MSFTNGP11...
> Hi Mac,
>
> this is by design. Users will only be able to install apps that work
> strictly within HKEY Current User (don't quote me on that however).
>
> In order to allow user to install apps you will have to create a GPO see
the
> explanations on the following Computer Configuration/administrative
> templates/windows components/windows installer and in here Always install
> with Elevated Privileges (has to be done for User Configuration as well)
and
> Enable user control over install.
>
> Hope this helps
>
> Ralph D. Worgul
> "Mac" <akaboats@hotmail.com> wrote in message
> news:08b801c2c3f6$c4e75020$8af82ecf@TK2MSFTNGXA03...
> > W2K Pro user in Power User group can't install software
> > like they are supposed to be able to do. Can someone give
> > me step by step how to enable this?
> >
> > Thanks,
> > Mac
>
>
- Next message: Joe Richards [MVP]: "Re: Is It Necessary To Include A DBA in the Administrator's Group?"
- Previous message: Joe Richards [MVP]: "Re: LogonUser(..)"
- In reply to: Ralph D. Worgul: "Re: Power User Can't Install Software"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|