asked on

Allowing user to install programs without becoming admin

I have a couple of users that I want to allow to be able to install programs. However, for directory security reasons, I don't want them becoming admnistrators. Is there a setting that will allow me to do this?

ASKER CERTIFIED SOLUTION

Phil_Agcaoili

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

jannepm

If you have problems using the Power Users group you could set one user with Administrator rights at their local computers. Do not tell the password.

Then use program CPAU (Create Process as Another User) which lets you run the setup executables as Administrator right. URL: http://www.joeware.net/win/free/tools/cpau.htm

Basically you create a encoded job and then users execute it, without knowing the Administrator password.

Usage:

cpau -u machine\administrator -p password -ex setup_executable.exe -file install.txt -enc

Then transfer cpau.exe and install.txt at their local computer. When they want to install a program as administrator, they'd rename the setup.exe to setup_executable.exe and run CPAU:

cpau -file install.txt -dec -profile

royalcanin

You could also deploy the app via Group Policy and a created MSI package, then you just have it run with elevated privliages

Here is a link to an MS KB artical about it:

How To Allow Users Who Are Not Administrators to Install MSI Packages
http://support.microsoft.com/default.aspx?scid=kb;en-us;q259459