Re: Assigning applications to clients with USER GROUP privilege

Thanks for the last advice it did work however once the user was removed from
the security group and relogged on the same problem occured. I even installed
the regmon program to see waht the issue could be. Regmon will not activate
when account is in the "UserGroup" What could be done?

--
johnG


"Lanwench [MVP - Exchange]" wrote:

>
>
> In news:3D19CE58-220C-46B5-A566-15CA07CF0F3B@xxxxxxxxxxxxx,
> johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
> > Thank you Lanwench for replying to my question. But I think I was not
> > clear. Let me clarify. We assigned applications such as autocad and
> > frontpage to a user on the network. This user account had been
> > incorporated into the "User Group". When the user logged onto the
> > network they were not able to install frontpage because the desktop
> > installation icon was not there nor were they able to launch the
> > autodesk program. When trying to launch autodesk program the program
> > gave the user an error saying that they should use the regedit
> > command to edit th registry. When an administrator logged on to the
> > same computer station everything worked fine.
> >
> > Question: Is there something we can do to allow members of the user
> > group to install programs assigned by the server? Thanks
> >
> > We are trying out the regmon program. Thanks we will let you know at
> > things go.
>
> You can temporarily grant the user local admin rights. I like to set up an
> AD security group called "Local Admins" and add that to all workstations'
> local administrators groups....then you can add the users to this group,
> have them log in, and the apps should be assigned. They can then log out,
> and you can take them out of that AD group, and you don't even have to visit
> the machine. Does this help?
>
>
> > -
> > johnG
> >
> >
> > "Lanwench [MVP - Exchange]" wrote:
> >
> >>
> >>
> >> In news:46D81545-DEA2-4215-9B5C-C788487BD15A@xxxxxxxxxxxxx,
> >> johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
> >>> We are running windows xp with service pack 2 on all the client
> >>> stations. We were runing programs with no issues however the
> >>> programs were installed with local administrative rights. We,
> >>> recently installed a new small businees server 2003 system.
> >>> Everything works fine except some of the client computers. Here is
> >>> the problem-Some of the users were given "User group" rights from
> >>> the server when their account was set up. Now when the client user
> >>> logs on to the computer station and try to launch the program they
> >>> get a registry error and the program won't launch. If the user is
> >>> added to the "Administrators Group" and logs on the computer
> >>> station they are able to launch the software. Question: Is there
> >>> anyway to to assign software applications to a user who belongs to
> >>> the "User Group"? We tried to assign applications from the server to
> >>> the client user but the application won't get assigned to a user who
> >>> belongs to the "User Group" . --
> >>> johnG
> >>
> >> Firstly, I'd work on figuring out what, in these badly written apps,
> >> the user account needs permissions to write to. Try regmon & filemon
> >> from www.sysinternals.com to see if you can modify the registry or
> >> file path to grant "authenticated users" modify permissions, etc.
> >>
> >> I don't like adding users to the local administrators group.
>
>
>
.

Relevant Pages

  • Re: Local Admin & Startup Script
    ... Yea...this was a migration, but when I do add a user with /connectcomputer, I never make that selection that you're talking about. ... When I have a user who is not local admin, they get a pop up which says the ... "You must be a member of the local Administrators security group ... on this computer to install and configure applications. ...
    (microsoft.public.windows.server.sbs)
  • Re: how do I create a msi package to install via group policy?
    ... see the compatibility pack in add/remove programs. ... the compatibility pack tries to install. ... Is giving the computer objects permissions to the share on the server the ... create a global security group in Active Directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: SMS 2003 must use domain admin. to install?
    ... You need to add the MEMBER_SERVER$ to the local admin group on the DC. ... you want to publish in AD you have to give the same account full control ... >>> I try to install SMS2003 using advanced security, ...
    (microsoft.public.sms.setup)
  • Re: Creating folder - Marina Roos
    ... the same user account also created in the local computer ... and add to local admin group aswell. ... This program will install per user ...
    (microsoft.public.backoffice.smallbiz)
  • Re: Certificate-Problem
    ... As local Admin or Domain Admin it works also on the WTS. ... When the user tries to install the certificate he receives the ... The same errormessage occurs when trying to install the cert. ...
    (microsoft.public.windows.terminal_services)
Loading