Administrative Privileges

I have a problem when I try to install certain pieces of software.  For example, Learnkey Training.  When I do i get an error stating that I do not have administrative privileges, yet I can do just about anything you can imagine on my computer, the only thing I can't do is install certain pieces of software, and it's not ALL pieces of software.

"To install this program requires Administrative Privileges, which you do not have."

I know it has something to do with my account.  We run MS Active Directory.  When I log into any machine in our building using my credentials I get this error message trying to install Learnkey Training Software.  When I log in with any other user (except, ironically, the other IT Branch Tech) it installs without a problem.  It's something that only me and the other branch tech are limited by.

I've spoken with our Domain Administrator who swears I'm in all the same administrative containers as everybody else.

I am a member of the following groups:
Domain Users
GS-LASFDC-ADM-LocalAdmins
GS-ADM-OUAdmins

Another normal user (who does not have the administrative rights problem) on our network is a member of:
Domain Users

So why, would I be restricted from installing certain pieces of software?  I, and one other branch tech are the only ones we know of with this problem.

Like I say, probably 89% of all software applications install just fine, so there must be certain pieces of software that are somehow programmed differently and check some other method.  And somehow I and only one other Branch Tech have this issue, whereas normal every day users do not.

Any suggestions would be great, thanks!
Taylor HuckstepSenior Director, ITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

24BY7Commented:
You might need to login LOCALLY... not to your domain... as Administrator and install it.... if its WindowsXP.


At the login prompt, seleect computer name instead of your domain and then type in Administrator as username and whatever the local password is.
0
Phil_AgcaoiliCommented:
Does it say that your account is an administrator in Start-->Settings-->Control Panel-->Users ?
0
Dmitri FarafontovLinux Systems AdminCommented:
Try running rsop.msc from Start >> Run and see which policies really apply to you. Pay attention to software restriction modes (Unrestricted vs. Disallowed) and other Software Restriction Policies.
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

masnrockCommented:
Check the machine settings. I don't think your domain administrator did something quite right, unless the requirement is to be logged in as a local administrator like people have already said. Another possibility is having to add those named groups you're in into the administrator group on local machines.
0
Taylor HuckstepSenior Director, ITAuthor Commented:
First, thanks for all the replies and suggestions.

Reply to 24BY7
   Yes, this is the workaround "bandage" I don't like to use anymore, but you are right, this will get the software installed.  Just doesn't fix the problem.

Reply to Phil Agcaoili
   My account is a member of Debugger Users and Users, no Administrators membership there.  So I added myself to Administrators group, and that didn't make any difference (even rebooted to be sure, and I was still a member of Administrators after reboot.)
   Furthermore, the normal users who CAN install this software are only members of Debugger Users, of all things, so I WAS a member of that group before adding myself to Administrators.

Reply to DeltaFire
   I ran the resultant set of policies plugin and I'm not 100% sure what I'm looking for here, though I'm liking this direction.  What I did find out is that, Under Windows Settings > Software Restrictions > Security Levels, there are two objects, Unrestricted and Disallowed, and both say "Status: Not default level."  Whatever that means.
   The other thing, and this is the most interested, I discovered under properties for Computer Configuration AND for User Configuration that there is an unapplied GPO called "Local Group Policy."  It happens to be unapplied on mine and one other IT guy's computer but every other computer has it applied.  Problem is, the third IT guy who ALSO can't install some pieces of software due to administrative restrictions DOES have it applied, so I can't say this is the problem.
   Our user accounts are supposed to have all the exact same rights (no elevated rights) as the rest of the users in the building, we have special separate administrative domain accounts for that stuff, yet us 3 in IT (using our normal user accounts) cannot install this software because of administrative rights restrictions.  Our user account objects are in the same OU as the rest of the users incidentally.
   Any other suggestions of what to look for in RSOP.msc?

Reply to Masnrock
   Not sure what machine settings you'd like me to check.  And I'm going to agree our domain admin didn't do something quite right, I'm just trying to track down what, because he says "log in as local admin to install that software" but other users do not have to do this, only us IT guys, and it's really annoying that we have less rights somehow than normal users.  I'd like to fix the problem not bandaid it.  And because the other users can install this fine, it's not by design that we have to log in as local admin.
   Also, GS-LASFDC-ADM-LocalAdmins and GS-LASFDC-ADM-OUAdmins groups that my domain user account is a member of ARE already in the Local Administrators Group.

Any other suggestions?
0
Dmitri FarafontovLinux Systems AdminCommented:
>> I ran the resultant set of policies plugin and I'm not 100% sure what I'm looking for here, though I'm liking this direction.  What I did find out is that, Under Windows Settings > Software Restrictions > Security Levels, there are two objects, Unrestricted and Disallowed, and both say "Status: Not default level."  Whatever that means.

If that policy is not at the default level, that means the Domain Administrator will have to either manually approve all the programs you are trying to install or switch that mode off for you to read Unrestricted. At this point I would also check if any LoopBack policy gets re-applied to you by mistake. What happends with loopback when two policies are configured to merge with each other the most restrive one takes over. I believe that setting in the User Configuration >> Admin Templates.

>>Our user accounts are supposed to have all the exact same rights (no elevated rights) as the rest of the users in the building, we have special separate administrative domain accounts for that stuff, yet us 3 in IT (using our normal user accounts) cannot install this software because of administrative rights restrictions.
Well if you are in the same container as the regular users, you will be subjected to proccessing of Loopback Policy if configured by your Domain ADmin head. As pointed out above.

I would have to conclude that there is a LoopBack policy configured somewhere, which merges with your Default template, and thus forbidding the install. Also are you trying to tell us that regular users are able to install software? I wouldnt believe that can be the case, if they are running from group Users, in Active Directory Domain environment.
0
fladnag46Commented:
I have almost the exact same problem you do and I as well am a support tech.  I don't think it is an issue with your account though. I have two systems I use, and on one I can install the learnkey program and on the second I can not. So that is telling me there is something strange going on with the second system I have. I created that second system by takeing the hard drive out of another of my systems and putting into this one. So maybe the issue is that this system hasn't been joined to the domain properly. I will try leaving the domain and rejoining.
To verify my theory you could try logging into another system (except the tech with the same problem) giving yourself admin rights of course,  and try installing the app.
0
CetusMODCommented:
PAQed with no points refunded (of 250)

CetusMOD
Community Support Moderator
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.