Re: Local admin rights?

illingsk_at_cityofrochester
Date: 10/29/04 

Date: Fri, 29 Oct 2004 06:11:35 -0700

Thanks a lot Steve. This is just what I was looking for.
I simply did not know precisely what to ask for.
>-----Original Message-----
>There is not a user right that can accomplish that but
if the software
>install is a .msi package or can be converted into
a .msi package then you
>can modify the local Group Policy so that .msi
applications are always
>installed with elevated permissions. Local Group Policy
is opened via
>gpedit.msc and on a local computer will apply to ALL
users that use the
>computer. You would have to enable always installed with
elevated
>permissions in both computer and user configuration. The
link below explains
>more. --- Steve
>
>http://msdn.microsoft.com/library/default.asp?
url=/library/en-us/gp/324.asp
>
>"illingsk@cityofrochester.gov"
<anonymous@discussions.microsoft.com> wrote
>in message news:234a01c4bcea$343cb760$a301280a@phx.gbl...
>>A small handful of users needs to be able to install
>> programs periodically on WinXP workstations. We have no
>> Windows Domain here, and by default all users are made
>> members of the Power Users group.
>>
>> Rather than make these users members of the local
>> Administrators group, I was wondering if one of the
local
>> User Right settings could be modified to allow them to
>> accomplish a periodic software install?
>>
>>
>>>-----Original Message-----
>>>Add the user's domain account to the local
>> Administrator's group on each
>>>individual workstation. Be sure to add only the domain
>> account of the user
>>>who "owns" that machine, so that they cannot access
each
>> others'
>>>information.
>>>
>>>--
>>>*****************
>>>Laura E. Hunter - MVP
>>>Replies to Newsgroup only
>>>All advice offered as-is, no warranties expressed or
>> implied
>>>"Shane White" <ShaneWhite@discussions.microsoft.com>
>> wrote in message
>>>news:039257B8-7EA0-46EE-BDC0-
>> 2DCCD0E9F080@microsoft.com...
>>>> Hello,
>>>>
>>>> I have a client running a Novell and WindowsNT4.0
>> environment. When users
>>>> log into Novell, they are also logged onto the domain
>> (since passwords
>>>> match). Currently, no one has local admin access to
>> their own machine, so
>>>> they cannot install software, use Windows Update,
>> etc. What is the
>>>> easiest
>>>> way to give a user local admin rights to their own
>> machine under WinNT4.0?
>>>> I
>>>> tried creating a local account on the workstation,
but
>> then realized that
>>>> the
>>>> user never logs on to this workstation account since
>> they are
>>>> authenticating
>>>> to the domain. Users need to be able to install
>> software, use Windows
>>>> Update, etc. The only stipulation is that users
>> should NOT be able to
>>>> view
>>>> another machine's C: drive (i.e., \\machine-name\c$).
>>>>
>>>> Thanks for any advice-
>>>> Shane
>>>>
>>>
>>>
>>>.
>>>
>
>
>.
>

Relevant Pages

  • Re: Local admin rights?
    ... >install is a .msi package or can be converted into ... >can modify the local Group Policy so that .msi ... >installed with elevated permissions. ... >>A small handful of users needs to be able to install ...
    (microsoft.public.win2000.security)
  • Re: Local admin rights?
    ... There is not a user right that can accomplish that but if the software ... install is a .msi package or can be converted into a .msi package then you ... can modify the local Group Policy so that .msi applications are always ...
    (microsoft.public.win2000.security)
  • Re: Question Regarding Windows Security
    ... Windows XP to address these specific issues (as well as a number of other ... But install it ona test box and give ... > a non-admin user (which is exactly why I wanted to remove admin access). ... > that will convert an install.exe to an MSI package? ...
    (microsoft.public.windows.server.security)
  • Re: Deployment project - conditional custom action
    ... In my previous test, I used the same MSI package, so the Installed ... For the custom action you want to execute when you install the MSI package ...
    (microsoft.public.dotnet.general)
  • Re: Restrict Software installation??
    ... local group policy GPEDIT.MSC, ... install and GPO ... >assigned apps will work. ... >> Is there a way to avoid software installation on Windows ...
    (microsoft.public.win2000.security)