Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 392
  • Last Modified:

Limited admin privilege on Windows 7 Pro?

In my organization, we have several Users outside our network so we can't use GPO to push updates on their Windows 7 Pro machine.

We want to grant these Users enough privilege to perform regular updates (Adobe, Java, Quicktime, perhaps some Windows also), without granting them full Admin rights.

Is this possible?
0
sandshakimi
Asked:
sandshakimi
2 Solutions
 
Scott CSenior Systems EnginerCommented:
No, either they have rights to install programs or they don't.  You can't be specific and say they can update Java, Adobe, etc. but not others.
0
 
wolfcamelCommented:
a lot of remote management software such as Kaseya, and logmein will enable you to push updates/installs across the internet. The service has admin rights not the user.
0
 
rharland2009Commented:
The following tool might work foryou...
http://www.robotronic.de/runasspcEn.html

Website looks a little chintzy, but the software works as advertised.
0
Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as the high-speed power of the cloud.

 
John HurstBusiness Consultant (Owner)Commented:
You can set Windows updates to be automatic and they will install on a user machine on shutdown. You need to warn users about Patch Tuesday (second Tuesday or Wednesday of the month).

The other updates (Jave, Adobe, iTunes) cannot be done this way.

Look at Beyond Trust if you want a granular group policy extension to permit this.

http://www.beyondtrust.com/PowerBroker-Desktops-Windows-Edition.aspx?section=PowerBroker-Desktops-Windows-Edition

.... Thinkpads_User
0
 
pr0t0c0l12Commented:
The way we handle it is to add a domain user to the "power users" and give the account to the desktop services team.  We still have to touch machines to put username and password but at least we do less... We will not give that account out because it is like giving an administrator account out.  By the way, that account can't login to any machine at all so it is a service account only for installing applications.

Hope this helps.
0
 
McKnifeCommented:
Just a comment on pr0t0c0l12: there are no power users in win7. That group only exists for compatibility reasons and no privileges are added when joining that group.

The way to go here is the aforementioned powerbroker or http://www.quest.com/privilege-manager/
0
 
LeeTutorretiredCommented:
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
 
John HurstBusiness Consultant (Owner)Commented:
Also the suggestion in http://a#38775563 is also valuable.   ... Thinkpads_User
0
 
John HurstBusiness Consultant (Owner)Commented:
I suggest split between http://#a38774535 and http://#a38775563

The first post says how to handle the situation with no third party software and both posts offer third party software with granular solutions.

.... Thinkpads_User
0
 
McKnifeCommented:
I am ok with that.
0
 
modus_operandiCommented:
I've requested that this question be closed as follows:

Accepted answer: 250 points for thinkpads_user's comment #a38774535
Assisted answer: 250 points for McKnife's comment #a38775563

for the following reason:

Starting auto-close process to implement the recommendations of the participating Expert(s).
 
modus_operandi
EE Admin
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now