Sign in with
Sign up | Sign in
Your question

Installing applications

Last response: in Windows 2000/NT
Share
Anonymous
September 1, 2004 5:08:52 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I want a group of supervisors to be able to install applications on our AD
computers. Currenlty, only Domain Admins and Local Administrators have this
ability.

How can I set a group to install applications without adding them to the
Local Admininstrators groups of all my systems?

Brantley Allen
System Administrator
Pounds Photographic Labs
September 2, 2004 3:15:49 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi

if you do not mind spending a few bucks you could try our NeoExec/AD a go
and, for example, create a new path rule for a specific directory where the
files are to installed from. NeoExec/AD allows you to elevate the privs on a
per-application (or path) basis and does not require a second user account
like RunAs -- it changes the privielges on the fly.

A 30-day trial version of NeoExec/AD can be downloaded from our web site.

Feel free to contact me by email if you need further info: marc -- that
strange symbol - neovalens.com.

Hope it helps,

--
Marco [ www.neovalens.com ]
--

"news.birch.net" <brantley@pounds-tx.com> wrote in message
news:10jc41ktis6f619@corp.supernews.com...
> I want a group of supervisors to be able to install applications on our AD
> computers. Currenlty, only Domain Admins and Local Administrators have
this
> ability.
>
> How can I set a group to install applications without adding them to the
> Local Admininstrators groups of all my systems?
>
> Brantley Allen
> System Administrator
> Pounds Photographic Labs
>
>
Anonymous
September 3, 2004 6:08:48 AM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Brantley,

Thank you for posting here!

Based on my experience, during the installation of some application, it
needs full access the registry key HKEY_LOCAL_MACHINE and system folders
(e.g. C:\Windows and its subfolders). However, such registry key and
folders are only READ for normal Users.

You may create a group, and grant full permission to full access the
registry key HKEY_LOCAL_MACHINE and system folders. This can help
installing most applications. Even this, some application still need Local
Administrator permission, like Windows Update.

On the other hand, you can use Group Policy to deploy applicaitons. For
detailed information, you may visit the article below in Microsoft
Knowledge base:

321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based
on
http://support.microsoft.com/?id=321713

Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "news.birch.net" <brantley@pounds-tx.com>
| Newsgroups: microsoft.public.win2000.group_policy
| Subject: Installing applications
| Date: Wed, 1 Sep 2004 13:08:52 -0500
| Organization: Posted via Supernews, http://www.supernews.com
| Message-ID: <10jc41ktis6f619@corp.supernews.com>
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| X-Complaints-To: abuse@supernews.com
| Lines: 12
| Path:
cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.s
ul.t-online.de!t-online.de!news.glorb.com!news.alt.net!sjc1.usenetserver.com
!news.usenetserver.com!sn-xit-02!sn-xit-01!sn-xit-06!sn-post-01!supernews.co
m!corp.supernews.com!not-for-mail
| Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.group_policy:30069
| X-Tomcat-NG: microsoft.public.win2000.group_policy
|
| I want a group of supervisors to be able to install applications on our
AD
| computers. Currenlty, only Domain Admins and Local Administrators have
this
| ability.
|
| How can I set a group to install applications without adding them to the
| Local Admininstrators groups of all my systems?
|
| Brantley Allen
| System Administrator
| Pounds Photographic Labs
|
|
|
Related resources
Anonymous
September 3, 2004 3:17:31 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

ok, thanks.

Brantley

"Feng Mao" <fengmao@online.microsoft.com> wrote in message
news:vqcilrVkEHA.2656@cpmsftngxa10.phx.gbl...
> Hi Brantley,
>
> Thank you for posting here!
>
> Based on my experience, during the installation of some application, it
> needs full access the registry key HKEY_LOCAL_MACHINE and system folders
> (e.g. C:\Windows and its subfolders). However, such registry key and
> folders are only READ for normal Users.
>
> You may create a group, and grant full permission to full access the
> registry key HKEY_LOCAL_MACHINE and system folders. This can help
> installing most applications. Even this, some application still need Local
> Administrator permission, like Windows Update.
>
> On the other hand, you can use Group Policy to deploy applicaitons. For
> detailed information, you may visit the article below in Microsoft
> Knowledge base:
>
> 321713 HOW TO: Use Group Policy to Set Automatic Installation Options
> Based
> on
> http://support.microsoft.com/?id=321713
>
> Have a nice day!
>
> Thanks & Regards,
>
> Feng Mao [MSFT], MCSE
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --------------------
> | From: "news.birch.net" <brantley@pounds-tx.com>
> | Newsgroups: microsoft.public.win2000.group_policy
> | Subject: Installing applications
> | Date: Wed, 1 Sep 2004 13:08:52 -0500
> | Organization: Posted via Supernews, http://www.supernews.com
> | Message-ID: <10jc41ktis6f619@corp.supernews.com>
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> | X-RFC2646: Format=Flowed; Original
> | X-Complaints-To: abuse@supernews.com
> | Lines: 12
> | Path:
> cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.s
> ul.t-online.de!t-online.de!news.glorb.com!news.alt.net!sjc1.usenetserver.com
> !news.usenetserver.com!sn-xit-02!sn-xit-01!sn-xit-06!sn-post-01!supernews.co
> m!corp.supernews.com!not-for-mail
> | Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.group_policy:30069
> | X-Tomcat-NG: microsoft.public.win2000.group_policy
> |
> | I want a group of supervisors to be able to install applications on our
> AD
> | computers. Currenlty, only Domain Admins and Local Administrators have
> this
> | ability.
> |
> | How can I set a group to install applications without adding them to the
> | Local Admininstrators groups of all my systems?
> |
> | Brantley Allen
> | System Administrator
> | Pounds Photographic Labs
> |
> |
> |
>
Anonymous
September 5, 2004 2:27:05 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

circa Fri, 03 Sep 2004 02:08:48 GMT, in
microsoft.public.win2000.group_policy, Feng Mao
(fengmao@online.microsoft.com) said,
> Hi Brantley,
>
> Thank you for posting here!
>
> Based on my experience, during the installation of some application, it
> needs full access the registry key HKEY_LOCAL_MACHINE and system folders
> (e.g. C:\Windows and its subfolders). However, such registry key and
> folders are only READ for normal Users.
>
> You may create a group, and grant full permission to full access the
> registry key HKEY_LOCAL_MACHINE and system folders. This can help
> installing most applications. Even this, some application still need Local
> Administrator permission, like Windows Update.
>
> On the other hand, you can use Group Policy to deploy applicaitons. For
> detailed information, you may visit the article below in Microsoft
> Knowledge base:
>
> 321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based
> on
> http://support.microsoft.com/?id=321713
>
> Have a nice day!
>
> Thanks & Regards,
>
> Feng Mao [MSFT], MCSE
> Microsoft Online Partner Support

Additionally, take a look at the Application Compatibility Toolkit,
which is generally a safer way to go than simply granting users full
control permissions to HKLM. The ACT is a sorely underrated and
under-publicized set of tools, IMO.

http://www.microsoft.com/technet/prodtechnol/windows200...
s/appkit.mspx

or

http://tinyurl.com/3a6mx

Laura
--
Experience is the name every one gives to their mistakes.
-Oscar Wilde
!