Advertisement

05.27.2008 at 03:48AM PDT, ID: 23434302
[x]
Attachment Details

Will GPO based "Always install with elevated privileges" allow more privileges to the users

Asked by kamleshgwalani in Active Directory, Windows Network Security Questions, Windows 2003 Server

Tags: Microsoft, Server, 2003, Group Policy, Always install with elevated privileges

Hello,

I am rolling out one MSI file through Group Policy on 4000 PCs in my organization. I have tested on the PCs where users doesnt have any rights either Admin or Power Users rights on the local machine and it worked under my test environment after enabling the followings :

Comp config > Security settings
Right click restricted groups
Click Add group
Type Power Users (I think it's case sensitive)
Then click the Add button for Members of this group, and add in your AD groups.

AND

Computer Config > Admin Templates > Windows Components > Windows Installer > Always install with elevated privileges


as per my earlier question posted "http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_2003_Active_Directory/Q_23418261.html

NOW my main concern "ALWAYS INSTALL WITH ELEVATED PRIVILEGES" will it be allowing other installatable/MSI/EXE files to be installed on their machine where they dont have Admin Rights/Power Users.

How can i make sure after font is copied this option is able in case if it creates risk in my environment.

Please advise if you have any idea.Start Free Trial
[+][-]05.27.2008 at 03:50AM PDT, ID: 21650774

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]05.27.2008 at 05:04AM PDT, ID: 21651075

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Active Directory, Windows Network Security Questions, Windows 2003 Server
Tags: Microsoft, Server, 2003, Group Policy, Always install with elevated privileges
Sign Up Now!
Solution Provided By: tigermatt
Participating Experts: 1
Solution Grade: B
 
 
[+][-]06.05.2008 at 09:58AM PDT, ID: 21721600

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628