Solved

Urgent

Posted on 2007-11-28
8
191 Views
Last Modified: 2013-12-04
Hi all,

I am new to this site an wonder if someone can help me with an issue I have?
We have several applications, over 100, that require Administrative rights to install. I have allowed users to be Power Users, but even with this, they cannot install applications they need. I cannot make them Administrators of their XP Computers. What can I do, to ensure any applications can be installed, without granting higher than Power User access?
Solution ideally would be non AD involved, but if that is the only way then it will do I guess.
Thanks in advance all
0
Comment
Question by:sunilsh2008
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 3

Accepted Solution

by:
top_gizmo earned 500 total points
ID: 20367501
There is no simple answer.  You will not be able to enable users to install software without admin rights.

You can push out software with several AD tools like group policy or SMS.

If you dont have access to these tools, you can still script a solution by installing software as a scheduled task using the local admin account.

Lastly, and I say lastly because it is the least secure.  You can create a wrapper that has admin rights and point it to the software to install.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20369121
""""Solution ideally would be non AD involved, but if that is the only way then it will do I guess

That Statement worries me big time! why non AD?
0
 

Author Comment

by:sunilsh2008
ID: 20370566
Sorry, what is a wrapper?
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 

Author Comment

by:sunilsh2008
ID: 20370571
THANK YOU SO MUCH FOR YOUR HELP, I HAVE FALLEN IN LOVE WITH THIS SITE ALREADY
0
 

Author Comment

by:sunilsh2008
ID: 20370582
Non - AD because this is a tempory solution and we have many applications and few users in compaison. We intend to use AD / SMS for this soon, but was after a woraround before then
0
 
LVL 3

Expert Comment

by:top_gizmo
ID: 20370600
What I mean by a wrapper is to create a script that contains the admin user name and password that runs the install as the admin.

Of course, nothing is absolutely secure.  A vbscript could be easily read by anyone and is not recommended.  There is a scripting solution that is more secure than vbscript, but it to is not fail safe from hackers.  Check out AutoIt at http://www.hiddensoft.com it is a free.  It does take some scripting but has a really great help file.  AutoIt scripts are compiled, and you can encrypt them with a pass phrase so it can not be decompiled without the pass phrase.
0
 

Author Comment

by:sunilsh2008
ID: 20370608
How about psexec? from sysinternals?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20370644
psexec is a great option - still manual to a point, but you can run it as a user with the approp rights and fire it off at machines
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question