Re: Local admin rights?

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/29/04 

Date: Fri, 29 Oct 2004 02:27:56 GMT

There is not a user right that can accomplish that but if the software
install is a .msi package or can be converted into a .msi package then you
can modify the local Group Policy so that .msi applications are always
installed with elevated permissions. Local Group Policy is opened via
gpedit.msc and on a local computer will apply to ALL users that use the
computer. You would have to enable always installed with elevated
permissions in both computer and user configuration. The link below explains
more. --- Steve

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/324.asp

"illingsk@cityofrochester.gov" <anonymous@discussions.microsoft.com> wrote
in message news:234a01c4bcea$343cb760$a301280a@phx.gbl...
>A small handful of users needs to be able to install
> programs periodically on WinXP workstations. We have no
> Windows Domain here, and by default all users are made
> members of the Power Users group.
>
> Rather than make these users members of the local
> Administrators group, I was wondering if one of the local
> User Right settings could be modified to allow them to
> accomplish a periodic software install?
>
>
>>-----Original Message-----
>>Add the user's domain account to the local
> Administrator's group on each
>>individual workstation. Be sure to add only the domain
> account of the user
>>who "owns" that machine, so that they cannot access each
> others'
>>information.
>>
>>--
>>*****************
>>Laura E. Hunter - MVP
>>Replies to Newsgroup only
>>All advice offered as-is, no warranties expressed or
> implied
>>"Shane White" <ShaneWhite@discussions.microsoft.com>
> wrote in message
>>news:039257B8-7EA0-46EE-BDC0-
> 2DCCD0E9F080@microsoft.com...
>>> Hello,
>>>
>>> I have a client running a Novell and WindowsNT4.0
> environment. When users
>>> log into Novell, they are also logged onto the domain
> (since passwords
>>> match). Currently, no one has local admin access to
> their own machine, so
>>> they cannot install software, use Windows Update,
> etc. What is the
>>> easiest
>>> way to give a user local admin rights to their own
> machine under WinNT4.0?
>>> I
>>> tried creating a local account on the workstation, but
> then realized that
>>> the
>>> user never logs on to this workstation account since
> they are
>>> authenticating
>>> to the domain. Users need to be able to install
> software, use Windows
>>> Update, etc. The only stipulation is that users
> should NOT be able to
>>> view
>>> another machine's C: drive (i.e., \\machine-name\c$).
>>>
>>> Thanks for any advice-
>>> Shane
>>>
>>
>>
>>.
>>

Relevant Pages

  • Re: Local admin rights?
    ... >install is a .msi package or can be converted into ... >can modify the local Group Policy so that .msi ... >>A small handful of users needs to be able to install ... >> Rather than make these users members of the local ...
    (microsoft.public.win2000.security)
  • Re: Question Regarding Windows Security
    ... Windows XP to address these specific issues (as well as a number of other ... But install it ona test box and give ... > a non-admin user (which is exactly why I wanted to remove admin access). ... > that will convert an install.exe to an MSI package? ...
    (microsoft.public.windows.server.security)
  • Re: Deployment project - conditional custom action
    ... In my previous test, I used the same MSI package, so the Installed ... For the custom action you want to execute when you install the MSI package ...
    (microsoft.public.dotnet.general)
  • RE: Group Policy->Software Settings
    ... install their software. ... .msi package for their software or if they would be willing to create an ... | X-Newsreader: Microsoft Outlook Express 6.00.2800.1158 ... certain programs or a customizable one without using a time consuming msi ...
    (microsoft.public.win2000.group_policy)
  • Re: Local admin rights?
    ... >install is a .msi package or can be converted into ... >can modify the local Group Policy so that .msi ... >installed with elevated permissions. ... >>A small handful of users needs to be able to install ...
    (microsoft.public.win2000.security)