Extend Power User Privilege to install applications

From: Dong (anonymous_at_discussions.microsoft.com)
Date: 02/21/04

  • Next message: Dong: "Extend Power User Privilege to install applications" 
    Date: Fri, 20 Feb 2004 15:18:35 -0800

    I follow the procedures bellow to extend Power User
    privileges to install programs however Power User can
    install Microsoft applications no problem at all but the
    Norton Antivirus.

    1- Right after I modified Windows registry ----> Power
    User can install Norton Antivirus

    2- Reboot ----> Norton Antivirus again complaint that user
    need to have administrator access to install program.

    Please advise ASAP

    Bellow are the procedures that I followed:

    1. This policy extends elevated privileges to all
    programs. These privileges are usually reserved for
    programs that have been assigned to the user (offered on
    the desktop), assigned to the computer (installed
    nautomatically), or made available in Add/Remove Programs
    in Control Panel. This policy lets users install programs
    which require access to directories that the user might
    not have permission to view or change, including
    directories on highly restricted computers.

    Skilled users can take advantage of the permissions this
    entry grants to change their permissions and gain
    permanent access to restricted files and folders. Note
    that the User Configuration version of this entry is not
    guaranteed to be secure.

    This policy can be implemented at
    Computer Configuration\Administrative Templates\Windows
    Components\Windows Installer
    or
    User Configuration\Administrative Templates\Windows
    Components\Windows Installer.

    When enabled, Windows Installer defaults to using System
    privileges for the effected users' or computers' install.

    When I enabled the policy in Computer Configuration, it
    did an Add Value name AlwaysInstallElevated, as a
    REG_DWORD data type, and set the data value to 1, at the
    following keys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Inst
    aller

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
    \GroupPolicyObjects\LocalMachine\Software\Policies\Microsof
    t\Windows\Installer

    HKEY_USERS\<SID>\Software\Microsoft\Windows\CurrentVersionG
    roupPolicyObjects\LocalMachine\Software\Policies\Microsoft
    \Windows\Installer

    2. Enable user to use media source while elevated Group
    Policy, at Computer Configuration\Administrative
    Templates\Windows Components\Windows Installer, allows
    users to do the same.

    The policy sets the AllowLockdownMedia value name , a
    REG_DWORD data type, to 1, at the following keys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Inst
    aller

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
    \GroupPolicyObjects\LocalMachine\Software\Policies\Microsof
    t\Windows\Installer

    HKEY_USERS\<SID>\Software\Microsoft\Windows\CurrentVersionG
    roupPolicyObjects\LocalMachine\Software\Policies\Microsoft
    \Windows\Installer

  • Next message: Dong: "Extend Power User Privilege to install applications"

    Relevant Pages

    • Hijack imposta ayarla felrak eviewset
      ... otherwise healthy system and looking for HIV, ... requirement to enter passwords and install programs twice before they ... or reflash the BIOS. ... feature of a stock install anywhere. ...
      (microsoft.public.windowsxp.general)
    • Extend Power User Privilege to install application
      ... install Microsoft applications no problem at all but the ... This policy extends elevated privileges to all ... This policy lets users install programs ...
      (microsoft.public.windowsxp.customize)
    • Extend Power User Privilege to install applications
      ... install Microsoft applications no problem at all but the ... This policy extends elevated privileges to all ... This policy lets users install programs ...
      (microsoft.public.windowsxp.security_admin)
    • Re: apt does not doe what is should
      ... >> think your GTK related problems derive from compatibility problems mixing ... > install programs and solve dependencies. ... > So I can either install programs and have a non-working sytem or have no ... If I need just one or two packages from another repository, ...
      (alt.os.linux.suse)
    • Re: Is Windows inherently more vulnerable to malware attacks than OS X?
      ... in privileges. ... code on Windows; ... My right to track down malware on ... users need to be able to access their own files, install ...
      (comp.sys.mac.advocacy)