• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1062
  • Last Modified:

W7 - Give limited users rights to install fonts

Hi

W7 Pro.

Users does not have admin rights on their workstations.

I am looking for a workaround solution to grant them rights to install fonts without admin rights.

Group policy solution would be perfect

Any idea ?

Thank you
0
tgunduz
Asked:
tgunduz
  • 9
  • 8
1 Solution
 
tgunduzAuthor Commented:
C:\Windows\Fonts is located in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Would it be a good idea to move this colder to another partition ?
0
 
McKnifeCommented:
It can be achied via GPO by simply altering NTFS permissions on the folder c:\windows\fonts and also on the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
This is a computer based setting, to be found at computer config - windows settings security settings -file system/registry. You have to add the items (c:\windows fonts and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts) manually.

People seem to have problems using it, read http://serverfault.com/questions/86598/allowing-users-to-install-fonts-in-windows-7-through-gpo
0
 
tgunduzAuthor Commented:
McKnife:
GPO by simply altering NTFS permissions
How to make that ?
0
Cloud Class® Course: Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

 
McKnifeCommented:
Could it be I already described it in line 2 of 4? ;)
0
 
tgunduzAuthor Commented:
We are talking about
Click Start, and then click Run.
In the Open box, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
Click Add.

correct ?
0
 
McKnifeCommented:
Open group policy management. Create a policy and link it to the OU where the computers reside in. Now expand the policy and go to computer config. now follow the steps from line 2 above.
Of course group policy management is a mmc snapin, correct.
0
 
tgunduzAuthor Commented:
McKnife:
I m afraid these options are not awailable
plz see attached pic
Untitled.png
0
 
McKnifeCommented:
Where are you trying? You have to do it on a DC, not on a workstation.
Here:

Untitled.gif
0
 
tgunduzAuthor Commented:
Hi
I have but don't use domain controller.
We use basic login/pwd credentials thus I m not adding clients to DC.
Rgs
0
 
McKnifeCommented:
First you say
> Group policy solution would be perfect
and now
> I m not adding clients to DC.

Please decide for one.
0
 
tgunduzAuthor Commented:
I think i can create a group policy and apply to ech clients on by one
So if i have a solution on a desktop with mmc its fine for me

Thanks and apologies for the trouble
0
 
McKnifeCommented:
This is not possible via local group policies but you can adjust the ntfs permissions to c:\windows\fonts and the reg key mentioned above so that the everyone group gets the change right.
0
 
tgunduzAuthor Commented:
you right i tried that the problem i face is as admin when i right click on c:\windows\fonts and select property i can not see security tab whereas for other folders i have more tabs and security tabs

any idea why this folders property is different ?
0
 
McKnifeCommented:
Aargh, you are right. This folder is nasty, even with icacls its ntfs permissions cannot be changed (here at windows 7) - let me see, if I can find a clue on what to do.
0
 
tgunduzAuthor Commented:
the clue i found is

C:\Windows\Fonts is located in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Would it be a good idea to move this folder to another partition ? I keep users data on another partition so that when i restore images to C:\ their data & settings are not erased
0
 
McKnifeCommented:
Try it.
0
 
tgunduzAuthor Commented:
I tried and it seems ok - dunno if its a realiable solution in the long run -
I was looking for a clean solution incluting dealing with nastry folders NTFS permissions
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

  • 9
  • 8
Tackle projects and never again get stuck behind a technical roadblock.
Join Now