Why Do users need Server Admin Rights

Hi All,

I've just set-up a Windows 2008r2 Server with Remote Desktop Services, all is fully working user Group Policy & User Profiles Via GP.

The Server is for basic MS Office Applications and Sage CRM Web Application.

I've created a Domain Group Called "RDS Users" and added the 5 users.

Office Apps work brilliant without being a member of the Server\Administrators Group, however Part of the CRM Web App does not.

The CRM Sage is a internal web site, not an actual client bit of softare, we run it by simply http://server/crm.  

It uses Active X.

If we add the group to the local Administrators Group it works great, but soon as we remove it stops loading the Active X part and bit stop working within the page.

I've tried using the power group but this does not work.

Does anyone know any other way of give a user / group full access other than adding them to a Administrators Group ?


5 Users.

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You may have to grant the users permission to launch Active X via your GPO.
roger_patelAuthor Commented:
any chance you could let me know how, i've tried but not had any luck ?  looking into it more and more i think needs some sort of other access, SAGE are not offering any help other than saying users need FULL local admin rights

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

roger_patelAuthor Commented:

trying that right now
roger_patelAuthor Commented:
I cant add the  ActiveX Installer Service as i have Windows 2008, its not in the list ? have you done this before buddy
roger_patelAuthor Commented:
roger_patelAuthor Commented:
Hi there,

getting there but cant seem to get it working correctly.

I'm now get the error in the event viewer on the server and cant seem to resolve.

Attempt to install control http://bwi-fs03/crm/Plugin/eWarePluginX.cab failed. The host URL http://bwi-fs03 is not in policy

the above error happens when i open the crm web app and it attempts to install the plugin.

In the group policy i have added the below :
"Approved Installation Sites for ActiveX Controls"
http://bwi-fs03, with a value of 1,1,1,1

Does anyone know what i am doing wrong

Look at Privilege Authority, a free program from ScriptLogic. It allows you to create Group Policy Objects based on a Rule. The rules can apply to Programs, Folders or ActiveX object. Basically you create rules that allow these Programs, Folder or ActiveX objects to have higher permissions while the User account remains at a User permission level,
roger_patelAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for roger_patel's comment http:/Q_27383877.html#36929830

for the following reason:

Changed complete method due to time, thanks to all for the help.
roger_patelAuthor Commented:
roger_patelAuthor Commented:
This partially helped, however due to time our we decided to allow the users admin rights in the end..
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server Apps

From novice to tech pro — start learning today.