Give a user local admin rights, but still lock the pc down

I am in a school environment, and alot of the software the students use requires elevated rights to work properly.

Normally this is not a issue, as I can change permissions on folders and such. But one program they use will not run correctly unless the account is made a local admin.

alot of our students know there way around a computer, so I need to give the user account local admin rights, but lock everything else down as they were a standard user.

I have removed basic components like the control panel, run commands, etc. But i am not sure of the issue I would run into with them students having local admin rights.

The software makes many changes in the registry, and uses other components outside of the program folder, so using a run as will not work.

Has anyone here run into this, and if so how did they combat this issue.

Con366Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David-HowardCommented:
I have experienced the same quandary. I was able to get around the issue by locating the software folder on root and assigning permissions from there. I believe it was under the Security tab. At any rate, the program wouldn't run without Admin rights. Hopefully this is a workaround for you as well. As for having savy computer students and having to grant them Admin rights....you know the math on that one. Start>Run>Gpedit.msc and their in.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Berkson WeinTech FreelancerCommented:
http://vlaurie.com/computers2/Articles/xprunas.htm has some good information on this.  I must say that the second part about the runas command still seems to give the user the ability to determine the administrative password.
 
0
Con366Author Commented:
i have locked down alot of the setting like removeing the run command and control panel, but I am not sure the problems i might see giving them admin rights.
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

Berkson WeinTech FreelancerCommented:
i have locked down alot of the setting like removeing the run command and control panel, but I am not sure the problems i might see giving them admin rights.
The runas solution wouldn't give them admin rights, it would just have the single program run as admin.  
0
Con366Author Commented:
Runas will not work with this program. it will give the same error on parts of the programs.

It required local admin to run correctly
0
Berkson WeinTech FreelancerCommented:
Runas will not work with this program. it will give the same error on parts of the programs.

It required local admin to run correctly

Really?  That's strange. What program are you trying to get working?
 
0
deroodeSystems AdministratorCommented:
You could use a program like Microsoft Steadystate. That way every change that is done while using the program is rolled back after reboot.

http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx
0
Con366Author Commented:
though all these are viable solutions. None fit what I was looking for.

turns out there is a .NET error in the program, and it would error on any account you try.

I'll split the points between you 3
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.