Hello Everyone,
I am trying to figure out how to update our ERP software package (Blackbaud) on our systems that don't have rights to install software. Unfortunately, Blackbaud has patches that come out very frequently and each time we have to go to our workstations individually to logon administratively to apply the patch. This is starting to be a real pain in the neck. We don't want to have to change the security settings each time we do this so that clients can apply the patch. Obviously that opens them up for our users to install whatever they please. Is there any way to configure Group Policy to allow only the updating of Blackbaud without having to open the whole machine up to allow for software installation. We have checked with Blackbaud a number of times, but evidently they don't have many customers who are using their software in a domain environment.
What we have done so far in our Windows Server 2003 / Windows XP environment is go through and add domain users to the local administrators group. This will allow any of our users to install the patch, but it also allows them to install anything else they want. We can then go to group policy to restrict windows installs, but that will still allow them to install some things through Internet Explorer.
This is really starting to seem complicated. Does anyone have an ideas for a more simple solution? Thank you in advance for any help and suggestions.
Start Free Trial
