Solved

Install Fonts - Standard Users

Posted on 2014-12-10
2
126 Views
Last Modified: 2014-12-31
Hi,

We have a requirement to allow Windows 7 / Windows 8 machines on a  Server 2008 R2 Domain to be able to install Fonts as a standard user. (no admin rights).

From my testing there appears to be 3 locations the user needs write access to

C:\Windows\System32\FNTCACHE.DAT
C:\Windows\Fonts
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENT VERSION\FONTS

This is not a problem to grant and has been done via GP. However the solution does not work due to UAC being enabled. I am not allowed to reduce UAC down or disable it, when disabled fonts can be installed by standard users.

Does anyone know of any fixes / solutions which can allow fonts to be installed which can have UAC enabled.

I have heard of other pieces of software to install it for you, but again not allowed to do that either.

Kind Regards,

Alex
0
Comment
Question by:BoltonWanderer
2 Comments
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 450 total points
ID: 40491470
I've seen two ways of handling it.

1. Use an MSI to deploy the fonts - only really works when you have a large selection of fonts to add at once.
2. Let users import fonts to a folder. Then have a script that registers the font.

http://deployhappiness.com/installing-fonts-with-powershell/
0
 
LVL 95

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 50 total points
ID: 40491498
Agree with the suggestion above - use a script. I can offer you a vb script if you prefer.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now