Way to allow font installs without administrative access?

Hello Experts - I'm trying to find a compromise that would allow one of my marketing staff to install fonts without having full administrative access to her machine.  Is there a way to allow this but still prevent all of the other admin access?
danbrown_IT ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Short of something like Power Broker from Beyond Trust, I think the ability to install fonts requires Admin permissions. It tends to be ON or OFF.
danbrown_IT ManagerAuthor Commented:
I know there are scripts that can be run which will do it but I'm also hearing that the last win update breaks it.
JohnBusiness Consultant (Owner)Commented:
The "easy" solutions tend to fall victim to updates now or the next one. Microsoft keeps tightening security.
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

NVITEnd-user supportCommented:
Basically, you need to give that user Modify rights to the C:\Windows\Fonts folder and the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts. The user can then copy font files into that folder. and install the registry key. Note: This is a hack and not the normal way to do it.

A better way is to have the SYSTEM or Administrator account install it.

fontinstall.bat
xcopy filename.ttf %systemroot%\fonts
regedit /s font.reg

Open in new window


font.reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts]
"fontname (TrueType)"="filename.ttf"

Open in new window


You can use a Startup gpo to run the above .bat and .reg files. Or, a program like PDQ Deploy, which I use (they have a free version) or Microsoft SCCM, or other similar programs.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
David Johnson, CD, MVPRetiredCommented:
Fonts are a systemwide option ergo administrative access is required.
danbrown_IT ManagerAuthor Commented:
Thanks NVIT, exactly what I was looking for!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Installation

From novice to tech pro — start learning today.