Solved

Application Access in Active Directory

Posted on 2009-05-07
2
189 Views
Last Modified: 2012-05-06
Hello all,

I was wondering if it is possible through group policies give certain users full rights for certain applications. My problem is I have stand alone Norton 2009s which constantly ask for admin access to update along with a few 3rd party apps which get frequent updates.

I am running Windows 2008 x64 Standard.

Thank You

0
Comment
Question by:devereandpartners
2 Comments
 
LVL 27

Accepted Solution

by:
bluntTony earned 500 total points
ID: 24324946
If you can't raise the users' local permissions (might be worth trying Power Users?), then really all you can control via group policy is file system and registry permissions. If you can figure out which files/keys are restricted to local admins and consequently non allowing normal users to perform certan tasks, then you can change this via group policy. Either that, or the software might have registry key you can edit to allow non-admins to perform certain tasks.

Unfortunately because it's 3rd party software there's not going to be anything in the GPMC to modify the application's settings. This would be where a custom adm template might come into play, either supplied by the software vendor or you can write one yourself (if you can find out the registry entries you need to edit).

Without any knowledge of these applications I'm afraid I couldn't be any more specific.


0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
There are many Password Managers (PM) out there to choose from. PM's can help with your password habits and routines, but they should not be a crutch you rely on too heavily. I also have an article for company/enterprise PM's.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now