?
Solved

Group Policy Administrator approved programs VISTA

Posted on 2007-11-20
7
Medium Priority
?
1,084 Views
Last Modified: 2008-05-31
Is there a Group Policy that I can set that will allow a standard user on Vista to run an approved program as an administrator without any prompts for security elevation?

Thanks
0
Comment
Question by:Mikal613
  • 4
  • 3
7 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20321564
There sure is and it's explained here:  http://technet2.microsoft.com/WindowsVista/en/library/00d04415-2b2f-422c-b70e-b18ff918c2811033.mspx#BKMK_AdminUAC

Essentially you want to have the program "Run as Administrator" all the time.

Jeff
TechSoEasy
0
 
LVL 48

Author Comment

by:Mikal613
ID: 20321622
Ok I read that article many times. Where does it say that From Windows Server 2003 (Active Directory) I can set a group policy that A Vista machine running as a standard user can run a specific program as an administrator without any interaction or knowledge from the standard user.

thank you
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20321785
In the section titled:  "Administering UAC with the local Security Policy Editor and Group Policy"

Jeff
TechSoEasy
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
LVL 48

Author Comment

by:Mikal613
ID: 20321807
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20323456
Since Vista no longer uses .adm files for it's Group Policy settings (it uses .admx) you need to configure this from a Vista machine.  You can load the Domain Group Policy Management Console on one of the Vista machines and configure the domain's policies from there.

Jeff
TechSoEasy
0
 
LVL 48

Author Comment

by:Mikal613
ID: 20323471
I cant have any modification from a Vista machine. I need a straight up solution from Server 2003 if there is any. If not then i guess the answer is no.

Thanks
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 1500 total points
ID: 20323649
You don't understand what I'm saying.   Group Policy Object Editor on Windows Server 2003, Windows XP, or Windows 2000 machines will not display new Windows Vista Administrative Template policy settings that may be enabled or disabled within a GPO.

You don't have to go to every Vista machine to do this, but you need to run the Domain's Group Policy Manager from one of them to configure the policies.  

You can read more about this here:  http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true

So, the answer isn't "NO", it's just slightly different than you are perceiving it should be.

Jeff
TechSoEasy
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
Exchange database can often fail to mount thereby halting the work of all users connected to it. Finding out why database isn’t mounting is crucial and getting the server back online. Stellar Phoenix Mailbox Exchange Recovery is a champion product t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question