[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

W7 - Give limited users rights to install fonts

Posted on 2009-12-21
17
Medium Priority
?
1,059 Views
Last Modified: 2013-12-08
Hi

W7 Pro.

Users does not have admin rights on their workstations.

I am looking for a workaround solution to grant them rights to install fonts without admin rights.

Group policy solution would be perfect

Any idea ?

Thank you
0
Comment
Question by:tgunduz
  • 9
  • 8
17 Comments
 

Author Comment

by:tgunduz
ID: 26096793
C:\Windows\Fonts is located in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Would it be a good idea to move this colder to another partition ?
0
 
LVL 57

Accepted Solution

by:
McKnife earned 2000 total points
ID: 26096957
It can be achied via GPO by simply altering NTFS permissions on the folder c:\windows\fonts and also on the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
This is a computer based setting, to be found at computer config - windows settings security settings -file system/registry. You have to add the items (c:\windows fonts and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts) manually.

People seem to have problems using it, read http://serverfault.com/questions/86598/allowing-users-to-install-fonts-in-windows-7-through-gpo
0
 

Author Comment

by:tgunduz
ID: 26097001
McKnife:
GPO by simply altering NTFS permissions
How to make that ?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 57

Expert Comment

by:McKnife
ID: 26097046
Could it be I already described it in line 2 of 4? ;)
0
 

Author Comment

by:tgunduz
ID: 26097139
We are talking about
Click Start, and then click Run.
In the Open box, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
Click Add.

correct ?
0
 
LVL 57

Expert Comment

by:McKnife
ID: 26097193
Open group policy management. Create a policy and link it to the OU where the computers reside in. Now expand the policy and go to computer config. now follow the steps from line 2 above.
Of course group policy management is a mmc snapin, correct.
0
 

Author Comment

by:tgunduz
ID: 26097703
McKnife:
I m afraid these options are not awailable
plz see attached pic
Untitled.png
0
 
LVL 57

Expert Comment

by:McKnife
ID: 26098272
Where are you trying? You have to do it on a DC, not on a workstation.
Here:

Untitled.gif
0
 

Author Comment

by:tgunduz
ID: 26098475
Hi
I have but don't use domain controller.
We use basic login/pwd credentials thus I m not adding clients to DC.
Rgs
0
 
LVL 57

Expert Comment

by:McKnife
ID: 26098951
First you say
> Group policy solution would be perfect
and now
> I m not adding clients to DC.

Please decide for one.
0
 

Author Comment

by:tgunduz
ID: 26098994
I think i can create a group policy and apply to ech clients on by one
So if i have a solution on a desktop with mmc its fine for me

Thanks and apologies for the trouble
0
 
LVL 57

Expert Comment

by:McKnife
ID: 26099115
This is not possible via local group policies but you can adjust the ntfs permissions to c:\windows\fonts and the reg key mentioned above so that the everyone group gets the change right.
0
 

Author Comment

by:tgunduz
ID: 26099167
you right i tried that the problem i face is as admin when i right click on c:\windows\fonts and select property i can not see security tab whereas for other folders i have more tabs and security tabs

any idea why this folders property is different ?
0
 
LVL 57

Expert Comment

by:McKnife
ID: 26099210
Aargh, you are right. This folder is nasty, even with icacls its ntfs permissions cannot be changed (here at windows 7) - let me see, if I can find a clue on what to do.
0
 

Author Comment

by:tgunduz
ID: 26099281
the clue i found is

C:\Windows\Fonts is located in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Would it be a good idea to move this folder to another partition ? I keep users data on another partition so that when i restore images to C:\ their data & settings are not erased
0
 
LVL 57

Expert Comment

by:McKnife
ID: 26099302
Try it.
0
 

Author Comment

by:tgunduz
ID: 26099342
I tried and it seems ok - dunno if its a realiable solution in the long run -
I was looking for a clean solution incluting dealing with nastry folders NTFS permissions
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
When you put your credit card number into a website for an online transaction, surely you know to look for signs of a secure website such as the padlock icon in the web browser or the green address bar.  This is one way to protect yourself from oth…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question