Extend Power User Privilege to install application

From: Dong (anonymous_at_discussions.microsoft.com)
Date: 02/20/04 

Date: Fri, 20 Feb 2004 15:17:12 -0800

I follow the procedures bellow to extend Power User
privileges to install programs however Power User can
install Microsoft applications no problem at all but the
Norton Antivirus.

1- Right after I modified Windows registry ----> Power
User can install Norton Antivirus

2- Reboot ----> Norton Antivirus again complaint that user
need to have administrator access to install program.

Please advise ASAP

Bellow are the procedures that I followed:

1. This policy extends elevated privileges to all
programs. These privileges are usually reserved for
programs that have been assigned to the user (offered on
the desktop), assigned to the computer (installed
nautomatically), or made available in Add/Remove Programs
in Control Panel. This policy lets users install programs
which require access to directories that the user might
not have permission to view or change, including
directories on highly restricted computers.

Skilled users can take advantage of the permissions this
entry grants to change their permissions and gain
permanent access to restricted files and folders. Note
that the User Configuration version of this entry is not
guaranteed to be secure.

This policy can be implemented at
Computer Configuration\Administrative Templates\Windows
Components\Windows Installer
or
User Configuration\Administrative Templates\Windows
Components\Windows Installer.

When enabled, Windows Installer defaults to using System
privileges for the effected users' or computers' install.

When I enabled the policy in Computer Configuration, it
did an Add Value name AlwaysInstallElevated, as a
REG_DWORD data type, and set the data value to 1, at the
following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Inst
aller

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\GroupPolicyObjects\LocalMachine\Software\Policies\Microsof
t\Windows\Installer

HKEY_USERS\<SID>\Software\Microsoft\Windows\CurrentVersionG
roupPolicyObjects\LocalMachine\Software\Policies\Microsoft
\Windows\Installer

2. Enable user to use media source while elevated Group
Policy, at Computer Configuration\Administrative
Templates\Windows Components\Windows Installer, allows
users to do the same.

The policy sets the AllowLockdownMedia value name , a
REG_DWORD data type, to 1, at the following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Inst
aller

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\GroupPolicyObjects\LocalMachine\Software\Policies\Microsof
t\Windows\Installer

HKEY_USERS\<SID>\Software\Microsoft\Windows\CurrentVersionG
roupPolicyObjects\LocalMachine\Software\Policies\Microsoft
\Windows\Installer

Relevant Pages

  • Hijack imposta ayarla felrak eviewset
    ... otherwise healthy system and looking for HIV, ... requirement to enter passwords and install programs twice before they ... or reflash the BIOS. ... feature of a stock install anywhere. ...
    (microsoft.public.windowsxp.general)
  • Extend Power User Privilege to install applications
    ... install Microsoft applications no problem at all but the ... This policy extends elevated privileges to all ... This policy lets users install programs ...
    (microsoft.public.windowsxp.security_admin)
  • Extend Power User Privilege to install applications
    ... install Microsoft applications no problem at all but the ... This policy extends elevated privileges to all ... This policy lets users install programs ...
    (microsoft.public.windowsxp.security_admin)
  • Re: apt does not doe what is should
    ... >> think your GTK related problems derive from compatibility problems mixing ... > install programs and solve dependencies. ... > So I can either install programs and have a non-working sytem or have no ... If I need just one or two packages from another repository, ...
    (alt.os.linux.suse)
  • Re: Is Windows inherently more vulnerable to malware attacks than OS X?
    ... in privileges. ... code on Windows; ... My right to track down malware on ... users need to be able to access their own files, install ...
    (comp.sys.mac.advocacy)