Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Is there a way for users to run programs in Windows 7 without being local admin?

Posted on 2013-06-26
13
Medium Priority
?
431 Views
Last Modified: 2013-07-26
Is there a way to have users be able to run programs in Windows 7 without being local admins? I'm talking programs like Go To Meeting, or updates? We don't want to give users to mush authority but we don't want them to get frustrated either.
Thanks!
0
Comment
Question by:Bob Macpherson
  • 4
  • 4
  • 2
  • +2
13 Comments
 
LVL 1

Expert Comment

by:Spej
ID: 39279570
Disable UAC.

http://www.mydigitallife.info/how-to-disable-and-turn-off-uac-in-windows-7/



or you could try Group Policy on each PC (or domain if there is one) for Windows Installer.

http://technet.microsoft.com/en-us/library/cc739980(v=ws.10).aspx


Hope this helps.
0
 
LVL 57

Expert Comment

by:McKnife
ID: 39279777
Hi.

Disabling UAC does not make it better for non-admins, quite the contrary even as one of UAC's purposes is compatibility. I am talking about the UAC feature of folder virtualization for example that will help standard users to run programs being incompatible with non-admins.

If you ask "is there a way", the answer is of course: yes! Millions of win7 users run happily without admin privileges. It depends on the software you use. Non-compliant software should be avoided.
0
 
LVL 93

Expert Comment

by:nobus
ID: 39280471
what problem or error do they have when trying?
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:Bob Macpherson
ID: 39281211
I don't really want to disable UAC.
The problem they are having is that whenever they run, let's say Go To Meeting, they are prompted for the Admin credentials, and we do not want to give them that, so they have to call or email IT to come to put credentials in. This can be frustrating for them.
0
 
LVL 93

Expert Comment

by:nobus
ID: 39281502
0
 

Author Comment

by:Bob Macpherson
ID: 39281600
We really don't want to give users the power of Admin, we just want them to be able to work without frustration. How about a Group Policy that says if a user runs Go To Meeting he or she doesn't need to put in credentials, is this possible?
Thanks!
0
 
LVL 1

Expert Comment

by:Spej
ID: 39281627
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 39281802
Claudelu---Give specific permissions on the .exe for the programs.
http://www.addictivetips.com/windows-tips/windows-7-access-denied-permission-ownership/
0
 
LVL 57

Accepted Solution

by:
McKnife earned 2000 total points
ID: 39283855
> How about a Group Policy that says if a user runs Go To Meeting he or she doesn't need to put in credentials, is this possible?
Depends. There are softwares that request admin credentials ALTHOUGH they do NOT need them, simply because they are badly programmed. Then we can solve it if we install a so-called "shim", an application compatibility fix, that says: silly program, run as invoker, no matter what privileges he got.
There are other softwares that do indeed need admin rights for working - here again I say, these softwares should be avoided and the manufacturer should be notified that their software cannot be used without, to make them aware they are losing customers if they go on like this.

That said, there are softwares to mitigate this:
http://www.beyondtrust.com/Products/PowerBroker-Desktops-Free-Tool/ 
http://www.scriptlogic.com/products/privilegeauthority/ 

Those two are able to do more than windows itself can do: they enable admins to select certain users and give them full rights ONLY on certain applications/tasks.
0
 

Author Comment

by:Bob Macpherson
ID: 39318530
I have a few users (maybe 20) who would need a software installed to bypass the security for Go To Meeting, however I need to resolve for all users when (for example) need to install a printer driver and they don't have permissions in Windows 7, can this be done through group policy?
0
 
LVL 57

Expert Comment

by:McKnife
ID: 39318568
You did not give any feedback, how should we move on?
0
 

Author Comment

by:Bob Macpherson
ID: 39318591
I looked at your post and the privilege authority program might work for Go To Meeting, but when someone is off site with the laptop and needs to print something and needs to install the printer driver, can we change the regedit to mention that? Or can we include a group policy?
0
 
LVL 57

Expert Comment

by:McKnife
ID: 39318636
You can google for "point and print restrictions", then you will find http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx
(note: it does not only apply to networked printers but to all).
0

Featured Post

WatchGuard Case Study: Museum of Flight

“With limited money and limited staffing, we didn’t have a lot of choices in terms of what we could do to bring efficiency. WatchGuard played a central part in changing that.” To provide strong, secure Wi-Fi access within the museum, Hunter chose to deploy WatchGuard’s AP120 APs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

927 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question