Re: Users don't have permission to install software?

> they do get the admin rights to their machines.

Only when you assign a particular user at \connectcomputer time. Otherwise,
any other domain user logging on to that particular computer is not a local
administrator.

We need another 'mode', such as 'install only mode', where a user can login
for the purposes of a software installation only - and then must log off/on
as user immediately afterwards. Wish list.

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !


"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx>
wrote in message news:Ok4sopaOFHA.3716@xxxxxxxxxxxxxxxxxxxxxxx
> When you set up client machines on a SBS box with the /connectcomputer
> they do get the admin rights to their machines.
>
> That's the default way it was set up... if you want a more secure setup
> then you change those users to non admins and deploy the software from the
> server.
>
> Typically in 'any' computer system to 'install' software you must be an
> admin.
>
> Matthew Speed wrote:
>> I am on my first ever SBS installation so I apologize in advance for
>> asking dumb questions.
>>
>> I am trying to deploy software to user's PCs using the SBS. When non
>> Admin users log on they are unable to install the software because
>> they don't have Administrative rights on the local machine. What
>> exactly is the point of using SBS to deploy software if an admin still
>> has to sit at every machine?
>>
>> (BTW...I am sure that there is a way to do this without having to
>> visit each machine, or at least I hope there is. That was just my
>> first thought when this problem was encountered.)
>>
>> What do I need to do so that the software will install when Jane
>> Averageuser logs into her system?
>>
>> TIA
>
> --
> An open letter to the Security Community::
> http://msmvps.com/bradley/archive/2004/12/12/23540.aspx


.

Relevant Pages

  • Re: restricting software installation
    ... How would I go about setting up an OU and will that new OU disrupt my SBS ... > native state as per initial install, then just making the domain users ... > their install capabilities. ... > the OU that holds the real client machines. ...
    (microsoft.public.windows.server.security)
  • Re: remote clients behind firewall
    ... The clients are part of the domain and the Client Installer acct has local ... admin rights on the machines as a result of membership in Domain Admins group. ... I have been able to successfully install (according to ccm.log, ...
    (microsoft.public.sms.admin)
  • Re: Local Admin on workstation
    ... I wouldn't make them admin for 15 installs... ... You could use psexec but you first need to make a silent install ... convertors pack from MS for office 03 machines. ... You may also just use psexec to make a silent install remotely.. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Virtual server virtual PC
    ... My VMWare Host machines are not all too powerful of choc full of ram, ... The Virtual SBS external NIC is bridged to ... SBS I would want to be able to run SBS, maybe another server, and probably ... I take it you can install an OS to the hardware, ...
    (microsoft.public.windows.server.sbs)
  • Dialup Access To Intall Application
    ... mode TS for them to install the application. ... software useing TS in Admin mode. ... SBS allows two concurant admin sessions, ... >The LOB ISV needs remote dialup access to the server to ...
    (microsoft.public.windows.server.sbs)