Re: Programs that need admin rights, but user shouldn't have the

"Repent34" wrote:
> I have several programs that users need to run. These
> programs require the
> user to have local machine and domain local admin rights. I
> have noticed
> that they are now able to bypass alot of the GPO settings
> because of their
> admin rights. Is there a setting in the GPO's that will make
> the GPO's
> apply to them as well. I want these users to be as restricted
> in what they
> can do as everyone else.
>
> chris

Hi,

I haven?t met a program yet that I can?t make run under a Regular User
with a few individual file "write" access permissions and a few
specific registry "write" access permissions. I run everything from
AutoCad to Adobe. Now over the years, Adobe and Macromedia have become
very well behaved but AutoCad is still bad.

It actually is quite easy to do. 1> Install your "badly behaved"
programs on a test machine. Login as an Admin. Run the application
and then Search the HD for any files for todays date with a time that
is the same as when you ran the app. With the exception of the
recognized "system.dat" files etc. you can see what files that need
write access.

For the registry it is a little trickier. You can use inctrl5 to do a
scan of files and folders as well as reg keys
http://www.sd61.bc.ca/windows2000/downloads/inctrl5.zip

Or you can just open up the Registry and give users "Full Control"
Permissions on the HKLMachine-Software-SoftwareCompanyName.

However, IF I were you I would Contact UPS and ask for a software
update that runs under Windows XP regular user. It is in their best
interest to make their software as compatable with their users?
networks as possible. If it were my network, whether their software
would run under Windows XP regular user would be the "make or break"
dealmaker as to whether I used UPS or another shiping company.

I have had great success with contacting companies about this. So far
AutoDesk is the only one who has yet to conform.

Cheers,

Lara

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Group-Policy-Programs-admin-rights-user-ftopict543778.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1724219
.

Relevant Pages

  • Programs that need admin rights, but user shouldnt have them
    ... user to have local machine and domain local admin rights. ... that they are now able to bypass alot of the GPO settings because of their ...
    (microsoft.public.win2000.group_policy)
  • Re: Running a program with elevated privilages
    ... Thanks for the post anthony however the installation is not really the problem it's running the program for the first time that creates an issue as admin rights appear to be needed to create registry entries and register an OCX. ...
    (microsoft.public.windows.server.security)
  • Re: anyone running Kodak Dental imaging
    ... > local admin rights for the software to work correctly. ... >> handle imaging integration between Gendex and Dentrix. ... >> I would say that the issues with Kodak Imaging are similar. ... >> and/or per user registry settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: Quickbooks does not open
    ... for now we can to accomodate them and complain to them. ... There is another way around the registry permissions issue. ... > You don't have to give the user full admin rights, but you do have to give ... > computer's Power Users group and all will be right with the world. ...
    (microsoft.public.windows.server.sbs)
  • Re: Global Security Group on XP Machine
    ... For the local machine login, given that you must have this, ... you could place INTERACTIVE as a member of Administrators ... All of the 500 users have, and require, admin rights on the PC that they ... There is a global Security group, in active directory, that is a member ...
    (microsoft.public.security)
Quantcast