?
Solved

Local Admin Account Can't Install or Uninstall Software

Posted on 2008-11-12
12
Medium Priority
?
1,388 Views
Last Modified: 2012-05-05
Hello All,

     I have installed Windows Vista on a laptop and added the laptop to the domain.  Everything seems to be working just fine.  I added the user that will be using the laptop as a local admin like I have done with many other systems so they can add or remove software.  When I add this user as a local admin however they can add or remove software.  Not to sure what is going on here.  Any ideas?
0
Comment
Question by:fv858
  • 3
  • 2
  • 2
  • +4
11 Comments
 
LVL 11

Expert Comment

by:asian_niceguy
ID: 22945669
what is the exact error message when attempting to do this?
0
 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22945687
post the event log messages ?
0
 
LVL 15

Expert Comment

by:alienvoice
ID: 22945694
Have you given the domain acct which they r logging in with Admin rights within Vista?

Need to go to the Users acct and check via the ctrl panel. Added them to the Admin grp.
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
LVL 18

Expert Comment

by:sk_raja_raja
ID: 22945703
Part of the Vista security structure is that normal "administrators"
have only standard privileges. If you are in this category you must take
ownership of the file or folder in order to delete it.

http://www.vistax64.com/tutorials/67717-take-ownership-file.html
0
 

Author Comment

by:fv858
ID: 22945856
When I try to add or remove software I get a popup asking for the User Name and Password.  Only way to install it is using a domain admin account.  
0
 
LVL 57

Expert Comment

by:McKnife
ID: 22955305
Could it be this: If you enforce a certain policy, elevation only takes place after entering credentials, even for administrators. But this would also affect domain admins - does it? Does it affect domain admins as well, or are you only saying when you are asked for credentials, you entered the domain admin's name and pw and it worked?
If that policy is in effect, you would be able to install after entering your own credentials again.

Policy: security settings - local policies - sec. options - User account control: Behavior of the elevation prompt for administrators in Admin Approval Mode
" Prompt for credentials: An operation that requires elevation of privilege will prompt the Consent Admin to enter their user name and password.  If the user enters valid credentials the operation will continue with the applicable privilege
0
 

Author Comment

by:fv858
ID: 22957907
Yes....i went into control panel and went to User accounts on the laptop.  I added the user as an Administrator on that machine.  It asked for my domain admin account and password. It then lists the user as an administrator.  After that I try to install a program like Adobe Reader and I get a popup asking for the domain admin account and password.
0
 
LVL 57

Expert Comment

by:McKnife
ID: 22960395
Could it be you forgot to logout and in again? After promoting the user from restricted to admin, that user has to log in again before it becomes active (he gets the new token at logon).
0
 

Author Comment

by:fv858
ID: 22963172
No tried logging in and out and it didn't work.  Couldn't install any app.  Now I did get it to work but am a bit unsure why.

In Active Directory I moved the Computer object into the Sales OU which is where the user object is located.  There are two folders one is Users and the other Computers.  I just dragged the computer object into the Computers folder under sales and it worked.  Now she can install software from the network as well as install/uninstall any other programs on her laptop.  Not sure why that would not allow her to remove her own programs on her system.
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 23144943
PAQed with points refunded (500)

Computer101
EE Admin
0
 

Expert Comment

by:mortoncr
ID: 23163010
I have a new laptop with Home Premium installed. I have tried several things such as use the command prompt to create an ADMINISTRATOR account. I ran the regedit file above.  Still can not install as administrator.  I was able to install several programs, but will not install yahoo messenger.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So who is this article for? If you are like most of the computer users out there, you probably only realize the meaning of 'System maintenance' after something goes wrong. This article is for you if you care about keeping your system working opti…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
Suggested Courses
Course of the Month15 days, 11 hours left to enroll

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question