Re: Making Users Power Users, Without Install Privlidges

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks for this. Where is Group Policy do I grant access to these keys once I
find out which ones are required ?

Thanks

Michael

"Arkane" wrote:

> Hi there,
>
> We have a similar problem (well, we did). All of our users on one forest
> were all local administrators (as set by my predecessor). I've just finished
> 'moving' them out of Administrators and back as domain users.
>
> I found NTRegMon (available at www.sysinternals.com) very helpful for
> trapping application rights and such.
>
> A trick that worked for me was to login as a USER (but one that isn't locked
> down by GPOs), open up a command-prompt, use RUNAS to run NTRegMon as an
> administrator. Then clear the NTRegmon screen (so it pauses logging and
> clears the screen). Then enable logging just before you run the app.
> Don't do much else with the app, just close it, then pause monitoring on
> NTRegMon but DO NOT clear the screen. And then add a filter for 'DENIED' on
> the filter control panel and check through the list of things that it shows
> you in the panel.
>
> Hope that helps somewhat, as Dmitry said though - you want to give them ONLY
> the rights they need to run the applications successfully, little point
> granting them higher access (like power users) and then trying to restrict
> them, it's not the easiest way to do it IMO.
>
> "Dmitry Korolyov [MVP]" wrote:
>
> > Grant users registry permissions they need. You can do this for a large
> > amount of users/computers with group policy.
> > You can use ntregmon utility to check which registry keys/values are used by
> > application and find out which kind of access this application tries to get.
> >
> > --
> > Dmitry Korolyov [d__k@xxxxxxxxxxxxxxxxxxxxxx]
> > MVP: Windows Server - Directory Services
> >
> >
> > "Michael" <Michael@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:FD29C9CA-499C-4592-ABBA-BF8C87CB977C@xxxxxxxxxxxxxxxx
> > >I need to make some of my users power users, without giving them
> > >installation
> > > rights ?
> > >
> > > I have installed a new application that needs to access the registry, but
> > > I
> > > do not want users to be able to install applications.
> > >
> > > Any help is greatly appreciated.
> > >
> > > Michael
> >
> >
> >
.