Solved

Group Policy Administrator approved programs VISTA

Posted on 2007-11-20
7
1,070 Views
Last Modified: 2008-05-31
Is there a Group Policy that I can set that will allow a standard user on Vista to run an approved program as an administrator without any prompts for security elevation?

Thanks
0
Comment
Question by:Mikal613
  • 4
  • 3
7 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20321564
There sure is and it's explained here:  http://technet2.microsoft.com/WindowsVista/en/library/00d04415-2b2f-422c-b70e-b18ff918c2811033.mspx#BKMK_AdminUAC

Essentially you want to have the program "Run as Administrator" all the time.

Jeff
TechSoEasy
0
 
LVL 48

Author Comment

by:Mikal613
ID: 20321622
Ok I read that article many times. Where does it say that From Windows Server 2003 (Active Directory) I can set a group policy that A Vista machine running as a standard user can run a specific program as an administrator without any interaction or knowledge from the standard user.

thank you
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20321785
In the section titled:  "Administering UAC with the local Security Policy Editor and Group Policy"

Jeff
TechSoEasy
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 48

Author Comment

by:Mikal613
ID: 20321807
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20323456
Since Vista no longer uses .adm files for it's Group Policy settings (it uses .admx) you need to configure this from a Vista machine.  You can load the Domain Group Policy Management Console on one of the Vista machines and configure the domain's policies from there.

Jeff
TechSoEasy
0
 
LVL 48

Author Comment

by:Mikal613
ID: 20323471
I cant have any modification from a Vista machine. I need a straight up solution from Server 2003 if there is any. If not then i guess the answer is no.

Thanks
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 500 total points
ID: 20323649
You don't understand what I'm saying.   Group Policy Object Editor on Windows Server 2003, Windows XP, or Windows 2000 machines will not display new Windows Vista Administrative Template policy settings that may be enabled or disabled within a GPO.

You don't have to go to every Vista machine to do this, but you need to run the Domain's Group Policy Manager from one of them to configure the policies.  

You can read more about this here:  http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true

So, the answer isn't "NO", it's just slightly different than you are perceiving it should be.

Jeff
TechSoEasy
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now