Click here to get back home

How to allow standard user to install an application

 HomeNewsGroups | Search

microsoft.public.windows.server.security - Supporting MS Windows network? Read here before it's too late! 

get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
How to allow standard user to install an application Jake Smythe 08-18-2005
Posted by Jake Smythe on August 18, 2005, 6:51 am
Please log in for more thread options
Hello,

We have an old vb6 application that has to be installed/uninstalled on a
regular basis (Yeah the programmer doesn't work here anymore and we're
moving to .net) However right now we need a standard user to be able to
install/uninstall this application. Is there a way to allow them to just run
this particular setup installation and not others with out having to give
them admin rights? I know about the runas command but then we would have to
give them the password there or is there a way to fire off a batch file with
the admin pass stored in a file somewhere? We are on an windows 2003 domain,
clients are XP SP2.

Jake




Posted by Steven L Umbach on August 19, 2005, 12:04 pm
Please log in for more thread options
Depending on the application you may be able to tweak folder and registry
permissions to allow a regular user to install it. Try making the user a
power user temporarily and if that works you should be able to tweak
permissions to be like that of a power user. There is a security template
called compatws.inf that will give users group the same ntfs and registry
permissions as a power user.

Joe Richards has a utility like runas called cpau that allows you to create
a batch file and encode the credentials needed. See the link below if
interested in that.

http://www.joeware.net/win/free/tools/cpau.htm

With XP Pro you can use Software Restriction policies to restrict what
software a user can install and run via hash, certificate, and/or path
rules. You can also set the enforcement option so that it applies to local
administrators. However a local administrator can bypass SRP if they boot
into safe mode assuming they know that. See the link below if interested in
SRP. Good luck. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

show/hide quoted text




Similar ThreadsPosted
"Preparing to Install" Dialog Pops Up on Every Desktop Application Icon October 15, 2005, 2:40 pm
Granting Read Permission to Application Instead of User May 1, 2009, 7:12 pm
Finding Which Application Requires Specific User Privilege? December 26, 2006, 3:17 am
Allow user to install local printer without print operators member August 10, 2006, 11:44 am
2k3 standard x64 May 7, 2006, 2:53 pm
SHA-256 and Application Interoperability July 6, 2005, 9:15 am
Can't start my own COM+ Application May 31, 2006, 6:43 am
application monitoring May 6, 2007, 5:11 pm
Extend certificate validity time on Windows Standard CA November 14, 2008, 4:08 am
A Standard windows server 2003 security question July 27, 2009, 1:06 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Driving a better car - Fuelzilla.com

Cabling site for homeowners and pros alike - Cabling-Design.com

Friends:

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap
Privacy Policy