Re: Creating an app that runs as admin

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


I think the idea is to cater to corporate system
admins. All versions of Windows are now designed
to be corporate workstation installs. Unfortunately,
they concentrated on making it foolproof when used
by corporate employees, which is good for the admins,
but they didn't provide options for "secure computing"
in other scenarios.

Maybe Off topic: Most admins who look for secure computing want to
eliminate
the spread of viruses on their network, anything else is second priority.

What I meant was that with a corporate
workstation the people using it need to be
restricted to their own area, so as not to affect
others. With that in mind, MS has made it
difficult to create an all-user install without
custom settings and non-standard operations.

While on a SOHo system an all-user install
is often appropriate, so MS should have provided
a standard means to do that without needing to
compromise security.

I can't see any possible reason for the restrictions
on the all-users-app-data folder unless one
assumes that nobody (the other nobody, that is)
ever has reason to do an all-user install. So it
seems to be a design intended to simplify the job
of admins at an unnecessary cost to SOHo people.

In other words, virus spread and shared settings are
really two different issues. The fact that all-users-docs
is a public folder shows that MS was not thinking about
virus-related issues with the all-users-app-data
restrictions.


.

Relevant Pages

  • Re: Manifest File - Installs in Vista
    ... C:\Program Files was that it was the correct place for admins to install ... An Access front-end is arguably a program. ... Common_Appdata folder. ...
    (microsoft.public.access.modulesdaovba)
  • Re: MS04-015 patch
    ... as you state they are admins is something to figure. ... If you have a server with IIS, install Sus and point ... Microsoft MVP (Windows Server System: ... > install the patch for MS04-015? ...
    (microsoft.public.windowsxp.security_admin)
  • restricting acces to certain admins
    ... a certain group of admins should be able to install and administer ... the network components incl. ... Admins is too much, Power Users doesn't help and I couldn't find Group ... The only setup that I have found so far is creating an admin-group ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Login as local admin
    ... As i am trying to install SBS SP1, an error is displayed indicating that the ... current user must be a member of the Schema Admins and Enterprise Admins ... concern and questions about enabling the local administrator login. ...
    (microsoft.public.windows.server.sbs)