Limited admin privilege on Windows 7 Pro?

In my organization, we have several Users outside our network so we can't use GPO to push updates on their Windows 7 Pro machine.

We want to grant these Users enough privilege to perform regular updates (Adobe, Java, Quicktime, perhaps some Windows also), without granting them full Admin rights.

Is this possible?
sandshakimiAsked:
Who is Participating?
 
rharland2009Connect With a Mentor Commented:
The following tool might work foryou...
http://www.robotronic.de/runasspcEn.html

Website looks a little chintzy, but the software works as advertised.
0
 
Scott CSenior Systems EnginerCommented:
No, either they have rights to install programs or they don't.  You can't be specific and say they can update Java, Adobe, etc. but not others.
0
 
wolfcamelCommented:
a lot of remote management software such as Kaseya, and logmein will enable you to push updates/installs across the internet. The service has admin rights not the user.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
JohnConnect With a Mentor Business Consultant (Owner)Commented:
You can set Windows updates to be automatic and they will install on a user machine on shutdown. You need to warn users about Patch Tuesday (second Tuesday or Wednesday of the month).

The other updates (Jave, Adobe, iTunes) cannot be done this way.

Look at Beyond Trust if you want a granular group policy extension to permit this.

http://www.beyondtrust.com/PowerBroker-Desktops-Windows-Edition.aspx?section=PowerBroker-Desktops-Windows-Edition

.... Thinkpads_User
0
 
pr0t0c0l12Commented:
The way we handle it is to add a domain user to the "power users" and give the account to the desktop services team.  We still have to touch machines to put username and password but at least we do less... We will not give that account out because it is like giving an administrator account out.  By the way, that account can't login to any machine at all so it is a service account only for installing applications.

Hope this helps.
0
 
McKnifeCommented:
Just a comment on pr0t0c0l12: there are no power users in win7. That group only exists for compatibility reasons and no privileges are added when joining that group.

The way to go here is the aforementioned powerbroker or http://www.quest.com/privilege-manager/
0
 
LeeTutorretiredCommented:
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
 
JohnBusiness Consultant (Owner)Commented:
Also the suggestion in http://a#38775563 is also valuable.   ... Thinkpads_User
0
 
JohnBusiness Consultant (Owner)Commented:
I suggest split between http://#a38774535 and http://#a38775563

The first post says how to handle the situation with no third party software and both posts offer third party software with granular solutions.

.... Thinkpads_User
0
 
McKnifeCommented:
I am ok with that.
0
 
modus_operandiCommented:
I've requested that this question be closed as follows:

Accepted answer: 250 points for thinkpads_user's comment #a38774535
Assisted answer: 250 points for McKnife's comment #a38775563

for the following reason:

Starting auto-close process to implement the recommendations of the participating Expert(s).
 
modus_operandi
EE Admin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.