Way to allow font installs without administrative access?

danbrown_
danbrown_ used Ask the Experts™
on
Hello Experts - I'm trying to find a compromise that would allow one of my marketing staff to install fonts without having full administrative access to her machine.  Is there a way to allow this but still prevent all of the other admin access?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
Short of something like Power Broker from Beyond Trust, I think the ability to install fonts requires Admin permissions. It tends to be ON or OFF.
danbrown_IT Manager

Author

Commented:
I know there are scripts that can be run which will do it but I'm also hearing that the last win update breaks it.
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
The "easy" solutions tend to fall victim to updates now or the next one. Microsoft keeps tightening security.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

End-user support
Commented:
Basically, you need to give that user Modify rights to the C:\Windows\Fonts folder and the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts. The user can then copy font files into that folder. and install the registry key. Note: This is a hack and not the normal way to do it.

A better way is to have the SYSTEM or Administrator account install it.

fontinstall.bat
xcopy filename.ttf %systemroot%\fonts
regedit /s font.reg

Open in new window


font.reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"fontname (TrueType)"="filename.ttf"

Open in new window


You can use a Startup gpo to run the above .bat and .reg files. Or, a program like PDQ Deploy, which I use (they have a free version) or Microsoft SCCM, or other similar programs.
Top Expert 2016

Commented:
Fonts are a systemwide option ergo administrative access is required.
danbrown_IT Manager

Author

Commented:
Thanks NVIT, exactly what I was looking for!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial