• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 254
  • Last Modified:

Securing Licensed Software, But also Allowing For Easy Installation

Hello Experts ~ looking for new ideas. (so a simple short answer may not be too helpful for me)

Like every other company, we have many software installers that I'd rather not have copied and wandering around the company (or to home PC's).

Currently, using Active Directory, we only permit folder access to our licensed software to I.T. When an end-user needs an installation, we need to log in as an IT employee and install the software. It's a little tedious, and I'm curious what other companies do.

I've pondered many different ideas, and we even have a remote software installation/delivery implementation from CA, but these are always very complex to setup (correctly and work efficiently) and extremely time-consuming to maintain. We really dont have the time for these ~ at least the ones I've worked with.

Any thoughts?
4 Solutions
Christopher Raymond MendozaCommented:
Hello ottobock,

Let me share how we set up our computers here and in my previous employer's.

We shared a folder, let's say 'installers', and created one folder for each software we need to install. The folder names start with a four-digit number followed by the name of the software to be installed.

In each of these folders is a batch file - let's call it 'install_this.cmd' - and it contains the command to run the setup file i.e. setup.exe, plus parameters other commands needed to both expedite and fine tune the installation.

In the main folder (the 'installers' share), we have another batch file. Let's call it 'install_all.cmd'. What it does is parse through the folders and run each 'install_this.cmd'. In effect the I.T. personnel just clicks on the 'Next' and 'Ok' buttons until everything is completely set up.

The last folder, named '9999_secure' contains registry tweaks to protect the computer from a few dangers - autorun.inf, unauthorized installation and misleading filenames to name a few.

Hope this helps.
Microsoft System Center will do this. (Earlier SMS) You can send msi package(Software) to the enduser to install themself. there is no IT admin involved to install the SW. IT admin will push the installation to specific PC (Remotely) or he can send the msi package to end user pc.

for more info..
Thomas Zucker-ScharffSystems AnalystCommented:
Our network people maintain a license server which requires the installed software to "check-in" every 6 months.  This prevents installations at home (limited to predetermined ip range defined on license server)and on the off chance someone figures it out and brings their laptop into work in 6 months the software will disable itself.
ottobockAuthor Commented:
Thanks for all the ideas! Very interesting.

I'm curious with the license server mentioned by "tzucker." It sounds like the software package is modified? How is this possible with something like Office?  

sravi2208: I've looked at System Center ~ would definitely be an option if we were a little bigger. We've got a competitors asset management and software delivery solution, and it's really a burden to implement and support, given the size and time-available of our team. Of course, since our entire network is M$, I would think System Center would be a little easier. Future option maybe.

I was trying to remember what was done at the larger companies I've worked for in the past, but couldn't really remember (the technology has evolved a ton anyway). I was really wondering if someone integrated some Active Directory Groups & File/Folder-level permissions solution that I haven't thought of yet. :-) Sounds like Software Delivery solutions are really the most secure (and simple for end users).
Trust the template based software deployment will be useful


Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now