Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Group Policy Administrator approved programs VISTA

Posted on 2007-11-20
7
Medium Priority
?
1,081 Views
Last Modified: 2008-05-31
Is there a Group Policy that I can set that will allow a standard user on Vista to run an approved program as an administrator without any prompts for security elevation?

Thanks
0
Comment
Question by:Mikal613
  • 4
  • 3
7 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20321564
There sure is and it's explained here:  http://technet2.microsoft.com/WindowsVista/en/library/00d04415-2b2f-422c-b70e-b18ff918c2811033.mspx#BKMK_AdminUAC

Essentially you want to have the program "Run as Administrator" all the time.

Jeff
TechSoEasy
0
 
LVL 48

Author Comment

by:Mikal613
ID: 20321622
Ok I read that article many times. Where does it say that From Windows Server 2003 (Active Directory) I can set a group policy that A Vista machine running as a standard user can run a specific program as an administrator without any interaction or knowledge from the standard user.

thank you
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20321785
In the section titled:  "Administering UAC with the local Security Policy Editor and Group Policy"

Jeff
TechSoEasy
0
Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

 
LVL 48

Author Comment

by:Mikal613
ID: 20321807
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20323456
Since Vista no longer uses .adm files for it's Group Policy settings (it uses .admx) you need to configure this from a Vista machine.  You can load the Domain Group Policy Management Console on one of the Vista machines and configure the domain's policies from there.

Jeff
TechSoEasy
0
 
LVL 48

Author Comment

by:Mikal613
ID: 20323471
I cant have any modification from a Vista machine. I need a straight up solution from Server 2003 if there is any. If not then i guess the answer is no.

Thanks
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 1500 total points
ID: 20323649
You don't understand what I'm saying.   Group Policy Object Editor on Windows Server 2003, Windows XP, or Windows 2000 machines will not display new Windows Vista Administrative Template policy settings that may be enabled or disabled within a GPO.

You don't have to go to every Vista machine to do this, but you need to run the Domain's Group Policy Manager from one of them to configure the policies.  

You can read more about this here:  http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true

So, the answer isn't "NO", it's just slightly different than you are perceiving it should be.

Jeff
TechSoEasy
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question