[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Administrative Privileges

Posted on 2006-04-13
9
Medium Priority
?
880 Views
Last Modified: 2013-12-04
I have a problem when I try to install certain pieces of software.  For example, Learnkey Training.  When I do i get an error stating that I do not have administrative privileges, yet I can do just about anything you can imagine on my computer, the only thing I can't do is install certain pieces of software, and it's not ALL pieces of software.

"To install this program requires Administrative Privileges, which you do not have."

I know it has something to do with my account.  We run MS Active Directory.  When I log into any machine in our building using my credentials I get this error message trying to install Learnkey Training Software.  When I log in with any other user (except, ironically, the other IT Branch Tech) it installs without a problem.  It's something that only me and the other branch tech are limited by.

I've spoken with our Domain Administrator who swears I'm in all the same administrative containers as everybody else.

I am a member of the following groups:
Domain Users
GS-LASFDC-ADM-LocalAdmins
GS-ADM-OUAdmins

Another normal user (who does not have the administrative rights problem) on our network is a member of:
Domain Users

So why, would I be restricted from installing certain pieces of software?  I, and one other branch tech are the only ones we know of with this problem.

Like I say, probably 89% of all software applications install just fine, so there must be certain pieces of software that are somehow programmed differently and check some other method.  And somehow I and only one other Branch Tech have this issue, whereas normal every day users do not.

Any suggestions would be great, thanks!
0
Comment
Question by:Taylor Huckstep
8 Comments
 
LVL 1

Expert Comment

by:24BY7
ID: 16450316
You might need to login LOCALLY... not to your domain... as Administrator and install it.... if its WindowsXP.


At the login prompt, seleect computer name instead of your domain and then type in Administrator as username and whatever the local password is.
0
 
LVL 12

Expert Comment

by:Phil_Agcaoili
ID: 16450321
Does it say that your account is an administrator in Start-->Settings-->Control Panel-->Users ?
0
 
LVL 12

Expert Comment

by:Dmitri Farafontov
ID: 16451226
Try running rsop.msc from Start >> Run and see which policies really apply to you. Pay attention to software restriction modes (Unrestricted vs. Disallowed) and other Software Restriction Policies.
0
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

 
LVL 32

Expert Comment

by:masnrock
ID: 16452611
Check the machine settings. I don't think your domain administrator did something quite right, unless the requirement is to be logged in as a local administrator like people have already said. Another possibility is having to add those named groups you're in into the administrator group on local machines.
0
 

Author Comment

by:Taylor Huckstep
ID: 16455718
First, thanks for all the replies and suggestions.

Reply to 24BY7
   Yes, this is the workaround "bandage" I don't like to use anymore, but you are right, this will get the software installed.  Just doesn't fix the problem.

Reply to Phil Agcaoili
   My account is a member of Debugger Users and Users, no Administrators membership there.  So I added myself to Administrators group, and that didn't make any difference (even rebooted to be sure, and I was still a member of Administrators after reboot.)
   Furthermore, the normal users who CAN install this software are only members of Debugger Users, of all things, so I WAS a member of that group before adding myself to Administrators.

Reply to DeltaFire
   I ran the resultant set of policies plugin and I'm not 100% sure what I'm looking for here, though I'm liking this direction.  What I did find out is that, Under Windows Settings > Software Restrictions > Security Levels, there are two objects, Unrestricted and Disallowed, and both say "Status: Not default level."  Whatever that means.
   The other thing, and this is the most interested, I discovered under properties for Computer Configuration AND for User Configuration that there is an unapplied GPO called "Local Group Policy."  It happens to be unapplied on mine and one other IT guy's computer but every other computer has it applied.  Problem is, the third IT guy who ALSO can't install some pieces of software due to administrative restrictions DOES have it applied, so I can't say this is the problem.
   Our user accounts are supposed to have all the exact same rights (no elevated rights) as the rest of the users in the building, we have special separate administrative domain accounts for that stuff, yet us 3 in IT (using our normal user accounts) cannot install this software because of administrative rights restrictions.  Our user account objects are in the same OU as the rest of the users incidentally.
   Any other suggestions of what to look for in RSOP.msc?

Reply to Masnrock
   Not sure what machine settings you'd like me to check.  And I'm going to agree our domain admin didn't do something quite right, I'm just trying to track down what, because he says "log in as local admin to install that software" but other users do not have to do this, only us IT guys, and it's really annoying that we have less rights somehow than normal users.  I'd like to fix the problem not bandaid it.  And because the other users can install this fine, it's not by design that we have to log in as local admin.
   Also, GS-LASFDC-ADM-LocalAdmins and GS-LASFDC-ADM-OUAdmins groups that my domain user account is a member of ARE already in the Local Administrators Group.

Any other suggestions?
0
 
LVL 12

Expert Comment

by:Dmitri Farafontov
ID: 16458386
>> I ran the resultant set of policies plugin and I'm not 100% sure what I'm looking for here, though I'm liking this direction.  What I did find out is that, Under Windows Settings > Software Restrictions > Security Levels, there are two objects, Unrestricted and Disallowed, and both say "Status: Not default level."  Whatever that means.

If that policy is not at the default level, that means the Domain Administrator will have to either manually approve all the programs you are trying to install or switch that mode off for you to read Unrestricted. At this point I would also check if any LoopBack policy gets re-applied to you by mistake. What happends with loopback when two policies are configured to merge with each other the most restrive one takes over. I believe that setting in the User Configuration >> Admin Templates.

>>Our user accounts are supposed to have all the exact same rights (no elevated rights) as the rest of the users in the building, we have special separate administrative domain accounts for that stuff, yet us 3 in IT (using our normal user accounts) cannot install this software because of administrative rights restrictions.
Well if you are in the same container as the regular users, you will be subjected to proccessing of Loopback Policy if configured by your Domain ADmin head. As pointed out above.

I would have to conclude that there is a LoopBack policy configured somewhere, which merges with your Default template, and thus forbidding the install. Also are you trying to tell us that regular users are able to install software? I wouldnt believe that can be the case, if they are running from group Users, in Active Directory Domain environment.
0
 

Expert Comment

by:fladnag46
ID: 16623309
I have almost the exact same problem you do and I as well am a support tech.  I don't think it is an issue with your account though. I have two systems I use, and on one I can install the learnkey program and on the second I can not. So that is telling me there is something strange going on with the second system I have. I created that second system by takeing the hard drive out of another of my systems and putting into this one. So maybe the issue is that this system hasn't been joined to the domain properly. I will try leaving the domain and rejoining.
To verify my theory you could try logging into another system (except the tech with the same problem) giving yourself admin rights of course,  and try installing the app.
0
 

Accepted Solution

by:
CetusMOD earned 0 total points
ID: 16814870
PAQed with no points refunded (of 250)

CetusMOD
Community Support Moderator
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Screencast - Getting to Know the Pipeline
Suggested Courses
Course of the Month19 days, 1 hour left to enroll

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question