[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 934
  • Last Modified:

Suuficient right to uninstall a program

I do not understand why I am not able to uninstall some Applications from control panel , but I am able to install other Application.

I am logged in as domain Administrator and local administrator.

Any idea?

Thanks
0
jskfan
Asked:
jskfan
  • 10
  • 4
  • 2
5 Solutions
 
jcimarronCommented:
jskfan--
Tell us what the Applications are.

In addition to appropriate permissions , do you have OWNERSHIP of the applications?
Right click on the file's executable / Properties / Security / Advanced / Owner tab.
0
 
SandeshdubeyCommented:
What error message you recieve while uninstalling also check the system and application log for any errors and warning while uninstalling the app.
0
 
jcimarronCommented:
jskfan--
And here is an app to add Take Ownership to the context menu.
http://www.ghacks.net/2010/01/04/change-file-access-rights-with-take-ownership/
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
jskfanAuthor Commented:
it shows that I am the owner
0
 
jskfanAuthor Commented:
the message:

"you do not have sufficient access to uninstall Spotify. Please contact you Administrator"
0
 
jcimarronCommented:
0
 
SandeshdubeyCommented:
Can you replace the permission on the app folder and inerit the permission with full control and give a try
0
 
jskfanAuthor Commented:
I do not understand, I have some applications that I can run without run as administrator and some I will have to run them with Run as administrator.

As I said, I am logged in with Domain administrator account which is by default member of Local adinistrators group. In addition I added manually the account I looged in with(domain admin account) to the Local Administrator Group...just to make sure 10% the account is an administraor on the computer...

for instance I opened CMD and run GPresult, I got:

C:\>gpresult /scope computer /v
ERROR: Access Denied.

When I ran it with Run as Administrator, it worked...
0
 
jskfanAuthor Commented:
so the GPO create a real issue
0
 
jskfanAuthor Commented:
Name	                                  Type	 Security Level
%LocalAppData%\Temp\wz*\*.exe	Path	Disallowed
%LocalAppData%\Temp\Rar*\*.exe	Path	Disallowed
%LocalAppData%\Temp\7z*\*.exe	Path	Disallowed
%LocalAppData%\Temp\*.zip\*.exe	Path	Disallowed
%LocalAppData%\*\*.exe	                 Path	Disallowed
%LocalAppData%\*.exe	                 Path	Disallowed
%AppData%\Roaming\Spotify\*.exe	Path	Unrestricted
%AppData%\Local\Spotify\*.exe	Path	Unrestricted
%AppData%\*\*.exe	                 Path	Disallowed
%AppData%\*.exe	                                  Path	Disallowed

Open in new window

0
 
jskfanAuthor Commented:
what went wrong ?
0
 
jskfanAuthor Commented:
the problem is here:
%AppData%\*\*.exe                       Path      Disallowed
0
 
jskfanAuthor Commented:
I made it unrestricted and it fixed the problem..

But I believe users will be able to run anything under %Appdate% that way...
So how do I disallow everything under %Appdata% except for the manually specified paths?
0
 
jskfanAuthor Commented:
ok the Unrestricted, should pint to the .exe file specifically...
fixed
0
 
jskfanAuthor Commented:
thanks
0
 
jcimarronCommented:
jskfan--Glad to have helped.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 10
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now