Solved

Is there a way for users to run programs in Windows 7 without being local admin?

Posted on 2013-06-26
13
428 Views
Last Modified: 2013-07-26
Is there a way to have users be able to run programs in Windows 7 without being local admins? I'm talking programs like Go To Meeting, or updates? We don't want to give users to mush authority but we don't want them to get frustrated either.
Thanks!
0
Comment
Question by:Bob Macpherson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 2
  • +2
13 Comments
 
LVL 1

Expert Comment

by:Spej
ID: 39279570
Disable UAC.

http://www.mydigitallife.info/how-to-disable-and-turn-off-uac-in-windows-7/



or you could try Group Policy on each PC (or domain if there is one) for Windows Installer.

http://technet.microsoft.com/en-us/library/cc739980(v=ws.10).aspx


Hope this helps.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39279777
Hi.

Disabling UAC does not make it better for non-admins, quite the contrary even as one of UAC's purposes is compatibility. I am talking about the UAC feature of folder virtualization for example that will help standard users to run programs being incompatible with non-admins.

If you ask "is there a way", the answer is of course: yes! Millions of win7 users run happily without admin privileges. It depends on the software you use. Non-compliant software should be avoided.
0
 
LVL 92

Expert Comment

by:nobus
ID: 39280471
what problem or error do they have when trying?
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 

Author Comment

by:Bob Macpherson
ID: 39281211
I don't really want to disable UAC.
The problem they are having is that whenever they run, let's say Go To Meeting, they are prompted for the Admin credentials, and we do not want to give them that, so they have to call or email IT to come to put credentials in. This can be frustrating for them.
0
 
LVL 92

Expert Comment

by:nobus
ID: 39281502
0
 

Author Comment

by:Bob Macpherson
ID: 39281600
We really don't want to give users the power of Admin, we just want them to be able to work without frustration. How about a Group Policy that says if a user runs Go To Meeting he or she doesn't need to put in credentials, is this possible?
Thanks!
0
 
LVL 1

Expert Comment

by:Spej
ID: 39281627
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 39281802
Claudelu---Give specific permissions on the .exe for the programs.
http://www.addictivetips.com/windows-tips/windows-7-access-denied-permission-ownership/
0
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 39283855
> How about a Group Policy that says if a user runs Go To Meeting he or she doesn't need to put in credentials, is this possible?
Depends. There are softwares that request admin credentials ALTHOUGH they do NOT need them, simply because they are badly programmed. Then we can solve it if we install a so-called "shim", an application compatibility fix, that says: silly program, run as invoker, no matter what privileges he got.
There are other softwares that do indeed need admin rights for working - here again I say, these softwares should be avoided and the manufacturer should be notified that their software cannot be used without, to make them aware they are losing customers if they go on like this.

That said, there are softwares to mitigate this:
http://www.beyondtrust.com/Products/PowerBroker-Desktops-Free-Tool/ 
http://www.scriptlogic.com/products/privilegeauthority/ 

Those two are able to do more than windows itself can do: they enable admins to select certain users and give them full rights ONLY on certain applications/tasks.
0
 

Author Comment

by:Bob Macpherson
ID: 39318530
I have a few users (maybe 20) who would need a software installed to bypass the security for Go To Meeting, however I need to resolve for all users when (for example) need to install a printer driver and they don't have permissions in Windows 7, can this be done through group policy?
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39318568
You did not give any feedback, how should we move on?
0
 

Author Comment

by:Bob Macpherson
ID: 39318591
I looked at your post and the privilege authority program might work for Go To Meeting, but when someone is off site with the laptop and needs to print something and needs to install the printer driver, can we change the regedit to mention that? Or can we include a group policy?
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39318636
You can google for "point and print restrictions", then you will find http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx
(note: it does not only apply to networked printers but to all).
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
OfficeMate Freezes on login or does not load after login credentials are input.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question