Re: Software requires local administrator rights to run

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Your first, highest, and best alternative in my opinion is to send it
back while being very, very vocal to the maker as to the inadequacy
of their product.
Now, being realistic, the need for admin may be only due to stupid
installation choices (on the part of the maker). Often there is an
expectation of write access to the software install location or to its
registry keys. In these cases granting modify to Users group for a
minimal amount of storage or reg entries solves the problem.
Worse software sometimes has a hard-coded check that the user
is in Administrators (some is even so brain dead as to check that
the user is Administrator!!). For these there is not much hope.
In between there can also be some expecting to write in other
unexpected areas.
Finally, and this may be the case here, some software actively is
managing hardware by driver manipulation.

One can use filemon and sysmon from www.wininternals.com
in order to find where there is an acces failure.

If you must allow the operating user to be in admins then do not
even think of having this installed on the SBS server. Instead, in
the domain define a custom group, making the accounts that should
be controllers of the device members, and then on the low-end
client system hosting the device, add the custom group to that
machine's Administrators group (but try Power Users first).

Finally, lastly, and most importantly, inform the company of the
dismal inadequacy of their product, of how it disrespects their
customers by placing their infrastructure in jeopardy, and of how
the next purchase will be taking Windows logo designed support
into account.


"James" <James@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F2AFD1DD-E936-4513-A735-8F534750B939@xxxxxxxxxxxxxxxx
We just got a DVD duplicator (Rimage 360i) and the controlling software
requires the user to have local administrator rights or it will not
function
properly. Don't even get me started on what I think of this design. I
have
explored two options without satisfactory results.

1) Set the Advanced Properties to "run with different credentials". Of
course this requires the user to enter the password each time they run the
software so I might as well make them administrators in the first place.
Is
there any way to set up a program to automatically use a different users
credentials as you do with a service?

2) Tried to learn how to set up a network user as a local administrator
without making them a network administrator too. This is an area where I
don't know much and only understand half of what I know. I don't see any
default group that serves this purpose. Is that even possible? I thought
it
mighht have something to do with group policies but don't know where to
start. When I create a user, what controls whether they will be a local
admin or not?

For reference we are running Windows SBS 2003 Advanced, and XP Pro SP2 on
the workstation.

Thanks from a novice
--
James True
Automation Works, Inc.


.

Relevant Pages

  • Re: Software requires local administrator rights to run
    ... My feelings exactly about the inadequacy of the software. ... print logic has to manipulate a registry key and told me which one. ... I would like to try the option of creating a custom group and adding it to ... also administrators on the server too, which is of course not what I want. ...
    (microsoft.public.windows.group_policy)
  • Re: Admin equivalent group
    ... that you make a member of this custom group also a member ... not have allowed to them but which are to Administrators. ... Security) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Software requires local administrator rights to run
    ... What you described about attempting to add the domain custom group ... Administrators group there only has power on that machine, ... group of the member, just make sure in the Add dialog you navigate to ... Now, being realistic, the need for admin may be only due to stupid ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy issue - restricted groups
    ... there is a way to preserve the existing group's membership by appending ... This method, however, will not let you place the local administrator into ... the builtin administrator account from the administrators group. ... policy (making sure the local admin as well as domain admins are local ...
    (microsoft.public.windows.server.active_directory)
  • RE: GPO for local admin right?
    ... you have to logon as a local administrator on your ... client computer. ... To add domain users as a local administrator, you have to manually do it on ... Expand Groups and double click Administrators. ...
    (microsoft.public.windows.server.sbs)