Solved

Programs Requiring Administrative Privileges

Posted on 2007-11-27
3
223 Views
Last Modified: 2010-03-17
We have many programs throughout our company that require the user to have local administrative privileges before they can run. We have a standard Active Directory domain, each user by default has standard user privileges. However, we have to place each user into the Local Administrators group before they can use this needed software.

Any ideas how we can restrict the user like a standard user, but still let them have write access to most places so they can use the software?
0
Comment
Question by:DRLaff
3 Comments
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 50 total points
ID: 20360465
Depending on the needs of the individual applications, there are a number of different shims you can put in place.  Take a look at Aaron Margosis's "how to run as non-admin" blog for a number of tools and checklists that you can try: http://blogs.msdn.com/aaron_margosis/
0
 
LVL 3

Expert Comment

by:top_gizmo
ID: 20367456
Most of the time, the user only needs admins on two things.  

1.  They program files of the application.
2.  Registry keys associated with the application.

You can change the permissions for both these areas for the specific application.

Once you figure out what you need to set and where, you can push the solution.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now