Group Policy to administrator local rights

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ryan Langton (ryan_at_ryanlangton.com)
Date: 01/23/05 

Date: Sun, 23 Jan 2005 14:46:16 -0600

I help manage a network of over 100 clients, most running Windows XP, some
on earlier OS'es. We use Active Directory on a Windows 2003 Server. There
are a few business applications that we run that require full administrative
access to a few local computer files in order to run. Just one example is
our AS/400 interface program. The .exe crashes if you try to run the
program while logged on as a basic user. However, if logged on as
administrator, it runs fine. We've also found that giving full access to
the "Program Files" folder to all users of the machine allows this program
(and others) to run without a hitch.

My question is, do I have to give priveledges on each local machine for the
"Program Files" folder so that I don't have to make everyone local
administrators? Or is there a way to do this through group policy? I have
figured out how to restrict programs, what I want to do is allow them to run
unrestricted. By the way, I have tried using software exception path rules,
setting the value to unrestricted, but this doesn't seem to work. The rule
states "unrestricted = rights depend on the user rights" which is why it's
still not working (they are still logged in as users, not administrators).

Thanks for any advice,
Ryan

Relevant Pages

  • Re: Jan 11 New Anime series - my thoughts thru 3 eps [OT]
    ... neither administrators nor SYSTEM have write access. ... copy it to Program Files and double-click a .reg file), ... details of how UAC works) was that with UAC enabled even members of the ... applications (as long as UAC is enabled, ...
    (rec.arts.anime.misc)
  • Re: Group Policy
    ... Running Windows XP SP2. ... exclude other users, such as administrators? ... machine on members of the ... Some admin, some power ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy
    ... Running Windows XP SP2. ... exclude other users, such as administrators? ... machine on members of the ... Some admin, some power ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy Inheritance
    ... that my DC is running Windows 2000 Server. ... Microsoft MVP - Windows Server - Group Policy. ... policy limits user rights by pushing down the local Administrators group. ... rights through a domain group that I forgot to pull him out of, ...
    (microsoft.public.windows.group_policy)
  • Get user names
    ... I'm running Windows XP Pro and have the following users registered in the ... Nurchi: Administrators ...
    (microsoft.public.dotnet.languages.csharp)