Re: Assigning applications to clients with USER GROUP privilege



In news:3AB0D741-6872-4578-8780-C2C9B06D2021@xxxxxxxxxxxxx,
johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
> Both applications.

Which are? I'm not talking about filemon/regmon. I'm talking about the apps
that you say aren't working in your network, that prompted you to write.....
I use Autocad and Autocad Light and they run for regular limited users just
fine - I haven't tried FrontPage, note.

> It looks like windows won't allow programs to be
> installed when a computer account belongs to the "user group"

Computer account? A *user* account, I think you mean - some programs install
quite happily when users have no admin rights whatsoever (which is annoying
to admins), and most require that the installation be done by one *with*
admin rights.

> yo have
> to grant them administrative rights. But once they rturn to the user
> group they can't even acces the program.

Not necessarily.

> There's got to be away to
> grant a user account access to programs with given them
> administrative rights.

99% of my clients use only local user rights - I install the software either
as the admin, or as the user who *temporarily* has admin rights, and then
the regular non-admin user runs the software. I usually do this myself
rather than assigning applications, honestly.

If you're having problems with other applications, try talking to the
mfr/developer. It's their software, and it's their job to fix it if it was
written by lazy admins who presumed all users had 'root' privileges.


>
>>
>>
>> In news:01D37FE9-2DA7-444F-BA69-883D87D128AB@xxxxxxxxxxxxx,
>> johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
>>> Thanks for the last advice it did work however once the user was
>>> removed from the security group and relogged on the same problem
>>> occured.
>>
>> With which applications?
>>
>>> I even installed the regmon program to see waht the issue
>>> could be. Regmon will not activate when account is in the
>>> "UserGroup" What could be done?
>>
>> Run it when you're in as an admin. Check the included
>> documentation/help for Regmon/Filemon....
>>
>>
>>>
>>>
>>>>
>>>>
>>>> In news:3D19CE58-220C-46B5-A566-15CA07CF0F3B@xxxxxxxxxxxxx,
>>>> johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
>>>>> Thank you Lanwench for replying to my question. But I think I was
>>>>> not clear. Let me clarify. We assigned applications such as
>>>>> autocad and frontpage to a user on the network. This user account
>>>>> had been incorporated into the "User Group". When the user logged
>>>>> onto the network they were not able to install frontpage because
>>>>> the desktop installation icon was not there nor were they able to
>>>>> launch the autodesk program. When trying to launch autodesk
>>>>> program the program gave the user an error saying that they
>>>>> should use the regedit command to edit th registry. When an
>>>>> administrator logged on to the same computer station everything
>>>>> worked fine.
>>>>>
>>>>> Question: Is there something we can do to allow members of the
>>>>> user group to install programs assigned by the server? Thanks
>>>>>
>>>>> We are trying out the regmon program. Thanks we will let you know
>>>>> at things go.
>>>>
>>>> You can temporarily grant the user local admin rights. I like to
>>>> set up an AD security group called "Local Admins" and add that to
>>>> all workstations' local administrators groups....then you can add
>>>> the users to this group, have them log in, and the apps should be
>>>> assigned. They can then log out, and you can take them out of that
>>>> AD group, and you don't even have to visit the machine. Does this
>>>> help?
>>>>
>>>>
>>>>> -
>>>>> johnG
>>>>>
>>>>>
>>>>> "Lanwench [MVP - Exchange]" wrote:
>>>>>
>>>>>>
>>>>>>
>>>>>> In news:46D81545-DEA2-4215-9B5C-C788487BD15A@xxxxxxxxxxxxx,
>>>>>> johnG <johnG@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
>>>>>>> We are running windows xp with service pack 2 on all the client
>>>>>>> stations. We were runing programs with no issues however the
>>>>>>> programs were installed with local administrative rights. We,
>>>>>>> recently installed a new small businees server 2003 system.
>>>>>>> Everything works fine except some of the client computers. Here
>>>>>>> is the problem-Some of the users were given "User group" rights
>>>>>>> from the server when their account was set up. Now when the
>>>>>>> client user logs on to the computer station and try to launch
>>>>>>> the program they get a registry error and the program won't
>>>>>>> launch. If the user is added to the "Administrators Group" and
>>>>>>> logs on the computer station they are able to launch the
>>>>>>> software. Question: Is there anyway to to assign software
>>>>>>> applications to a user who belongs to the "User Group"? We
>>>>>>> tried to assign applications from the server to the client user
>>>>>>> but the application won't get assigned to a user who belongs to
>>>>>>> the "User Group" . --
>>>>>>> johnG
>>>>>>
>>>>>> Firstly, I'd work on figuring out what, in these badly written
>>>>>> apps, the user account needs permissions to write to. Try regmon
>>>>>> & filemon from www.sysinternals.com to see if you can modify the
>>>>>> registry or file path to grant "authenticated users" modify
>>>>>> permissions, etc.
>>>>>>
>>>>>> I don't like adding users to the local administrators group.


.

Relevant Pages

  • Re: Client Installation Issues: SMS 2.0 SP5
    ... Lets say the account I use for> the SMS Services is SMSAdmin. ... I setup the Client> Installation Account as what was listed above being our local admin ... password on some> of those, but any other idea's why prior to this, the client didn't want to> install? ... Grant the>> service account admin rights on every box, ...
    (microsoft.public.sms.setup)
  • Printer will only work in Admin Account
    ... > will only work in the Admin account. ... I rebooted and changed the accounts to limited users and it ... I then gave a user account Admin rights and it worked, ...
    (microsoft.public.windowsxp.print_fax)
  • Re: writing to registry in vista from guest account
    ... My application fails to write into registry key. ... After the installation I create new user/guest account and runs the ... The Standard user can have its rights elevated to admin level by giving a admin user-id a psw, which is only at the moment of escalation and is not maintained for the user. ... If the user account is a non-admin account, then it's not going to have admin rights as an designated user admin account, and the access is denied. ...
    (microsoft.public.dotnet.languages.csharp)
  • Printer will only work in Admin Account
    ... installing SP2 I installed a Dell 920 all-in-one printer. ... will only work in the Admin account. ... I then gave a user account Admin rights and it worked, ...
    (microsoft.public.windowsxp.print_fax)
  • RE: Printer will only work in Admin Account
    ... other programs I install, for that matter) show up on all user ... > will only work in the Admin account. ... I then gave a user account Admin rights and it worked, ...
    (microsoft.public.windowsxp.print_fax)