Re: Published application - what rights does the user need

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I will let you know. I have tried to change the entire setup since the last
debacle.

This time, I am going to assign it to a computer and i setup a group that
includes all of my computers. I gave that group Modify rights for bth the
share and ntfs


We will see what happens.

For your test, do you want me to run the setup under the logged on user?

"Jorge Silva" wrote:

Hi

If you try to run the setup diectly from the network share what hapens?

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"BookerW" <loneque@xxxxxxxxxxx> wrote in message
news:3B74FD0B-D9B2-4CE0-9CFF-1024142EC181@xxxxxxxxxxxxxxxx

I even gave the user admin rights and still got an access is denied error.
So somewhere in the process, I am missing something on permissions and the
like. I will keep reading.


"BookerW" wrote:

Harj,

When i click on the Advanced tab for Authenticated users , they do have
Apply Group Policy (Which is actually a part of the "Read" permission)

On the exe itself, Authenticated users have the Modify permission, and
that
particular computer account and user account have Full control
permission.

I even set the GPO to always install with Elevated Priviliges (On the
computer and user portion of the GPO)

I had the user run a gpupdate /force and restart the computer

And she still gets an access denied when trying to run the program from
Add
new programs




"Harj" wrote:

Hi,

The message we should be looking at here is Access is Denied.
On the policy we need the user and the computer to have read and apply
group policy and you state you have authenticated users with read.
They also need apply group policy.

Now how about the exe itself? Are the permissions set correctly on the
exe?

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com

BookerW wrote:
When you publish an application, does the user need admin rights to
install
the software.

When i check the policy events for one user, her computer account and
user
account have Full control access for the network share that has the
install
files.

On the policy delegation, authenticated users have Read access.

On the machine itself, the user is just a power user

In the policy events of the GPO, at 8:18, i see the following line:
Changes to software installation settings were applied successfully.

At 8:36am, i see the following error:

The assignment of application Adobe Acrobat 7.0 Professional from
policy
Install Adobe Acrobat pro failed. The error was : Access is denied.


AT what level am I missing permissions. The only thing I can think
of is
the user account itself, but I thought this would be run from the
system
account?





.



Relevant Pages

  • Re: Published application - what rights does the user need
    ... Apply Group Policy ... particular computer account and user account have Full control ... I even set the GPO to always install with Elevated Priviliges (On the ... Are the permissions set correctly on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Published application - what rights does the user need
    ... I am missing something on permissions and the ... Apply Group Policy ... particular computer account and user account have Full control ... I even set the GPO to always install with Elevated Priviliges (On the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Published application - what rights does the user need
    ... I am missing something on permissions and the ... Apply Group Policy ... particular computer account and user account have Full control permission. ... I even set the GPO to always install with Elevated Priviliges (On the ...
    (microsoft.public.windows.server.active_directory)
  • Re: unrestricted access to a file share
    ... account out to those at the location. ... In addition you may need to configure in Local Security Policy ... let everyone permissions apply to anonymous ... fileshare that have never been defined on the server (neither the user or ...
    (microsoft.public.security)
  • Re: Remote Event Log
    ... I need to setup the policy and permission on the Controller so ... It´s because of the change in security to eventlog announced in W2K3 SP1. ... My guess: The actual permissions on your eventlog are: ...
    (microsoft.public.windows.group_policy)