Re: Assigning applications to clients with USER GROUP privilege



In news:3D19CE58-220C-46B5-A566-15CA07CF0F3B@xxxxxxxxxxxxx,
johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
> Thank you Lanwench for replying to my question. But I think I was not
> clear. Let me clarify. We assigned applications such as autocad and
> frontpage to a user on the network. This user account had been
> incorporated into the "User Group". When the user logged onto the
> network they were not able to install frontpage because the desktop
> installation icon was not there nor were they able to launch the
> autodesk program. When trying to launch autodesk program the program
> gave the user an error saying that they should use the regedit
> command to edit th registry. When an administrator logged on to the
> same computer station everything worked fine.
>
> Question: Is there something we can do to allow members of the user
> group to install programs assigned by the server? Thanks
>
> We are trying out the regmon program. Thanks we will let you know at
> things go.

You can temporarily grant the user local admin rights. I like to set up an
AD security group called "Local Admins" and add that to all workstations'
local administrators groups....then you can add the users to this group,
have them log in, and the apps should be assigned. They can then log out,
and you can take them out of that AD group, and you don't even have to visit
the machine. Does this help?


> -
> johnG
>
>
> "Lanwench [MVP - Exchange]" wrote:
>
>>
>>
>> In news:46D81545-DEA2-4215-9B5C-C788487BD15A@xxxxxxxxxxxxx,
>> johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
>>> We are running windows xp with service pack 2 on all the client
>>> stations. We were runing programs with no issues however the
>>> programs were installed with local administrative rights. We,
>>> recently installed a new small businees server 2003 system.
>>> Everything works fine except some of the client computers. Here is
>>> the problem-Some of the users were given "User group" rights from
>>> the server when their account was set up. Now when the client user
>>> logs on to the computer station and try to launch the program they
>>> get a registry error and the program won't launch. If the user is
>>> added to the "Administrators Group" and logs on the computer
>>> station they are able to launch the software. Question: Is there
>>> anyway to to assign software applications to a user who belongs to
>>> the "User Group"? We tried to assign applications from the server to
>>> the client user but the application won't get assigned to a user who
>>> belongs to the "User Group" . --
>>> johnG
>>
>> Firstly, I'd work on figuring out what, in these badly written apps,
>> the user account needs permissions to write to. Try regmon & filemon
>> from www.sysinternals.com to see if you can modify the registry or
>> file path to grant "authenticated users" modify permissions, etc.
>>
>> I don't like adding users to the local administrators group.


.

Relevant Pages

  • Re: GPO on TCPIP settings?
    ... I wont to deny all domain users and Local administrators the ability to ... Which GPO settings are for this responsible? ... I would suggest to remove their user accounts from the local administrators group on their workstations for your and the company's peace of mind. ... This will also reduce support calls for accidental changes, deletions, and the fact that viruses and spyware can install under their user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Rights on Xp in 2000 Domain
    ... few users could not run MS Access 2000 unless they were a member of the ... local Administrators group. ... > systems Admin group and couldn't do it, ... >> Another idea is for you to install all of the software that they are ...
    (microsoft.public.win2000.active_directory)
  • Re: group policy question
    ... > You need to make sure they are local administrators on the affected ... > workstations in order to be able to install software, ... >> domain admins since there are subsites we do not want them to access, ...
    (microsoft.public.windows.server.sbs)
  • Re: How2: User Rights on Domain but Admin Rights on Computer
    ... You can add domain users to the local Administrators group with ... Mathworks MATLAB for example install their services. ... able to run it even if he is just a member of domain users group. ...
    (microsoft.public.windows.server.security)
  • Re: Assigning applications to clients with USER GROUP privilege
    ... johnG typed: ... > I even installed the regmon program to see waht the issue ... >>> network they were not able to install frontpage because the desktop ... >> You can temporarily grant the user local admin rights. ...
    (microsoft.public.windows.server.sbs)