run certain programs with elevated privileges

[breader]

I have a number of Sales People who are always on the road, and they all have XP Professional Laptops. I want to be able to adjusts either the registry or the group policy so that i can allow certain programs, on their Laptops, to run with elevated privilages, but still keep the Users as "Standard Users" for the rest.

 

[Shift838]

Active Directory would do it. You would have to create a specific ou and add them to that ou. You will have to configure the OU not to have their permissions be filtered down from above it.

 

[breader]

Hmmmm I don't understand. I don't want to give the user complete control over their computer I just want one program on their computer to run with elevated privileges. Spedifically Ad-aware. It has to make Registry edits.

 

[mbroeder]

I have the same question regarding allowing users access to the registry for Business Vision 32. I have no idea where to give them permission. I've had to temporarily give them administrator authority ust to get them running. I'm new on Windows 2000 and I would like to get this resolved asap.
Thanks

 

[breader]

My problem with Ad-aware is that the components that the program removes could be located in many different locations. I'm not familiar with Business Vision 32 but if it only needs access to a certain part of the registry you can give users access to that. I had to give users access to the Graphic Filters in order to get Microsoft Photo Editor to work. So maybe you can find what area you need.

 

[mozingod]

Couldn't you just run the program when they return to the office? I suppose you can make a batch file to run it w/the runas command, but then you'd have to have the admin username/password in the batch file. You could even make a no-name local admin account to run the batch file as, then make a shortcut to it on their desktop. I'd guess they'd never even know to look at the workings of the batch.

Darrell Mozingo

 

[breader]

That's a good idea, and yes i don't any of them would think about looking in the batch file

 

[mozingod]

That way even if their laptops are stolen, the only admin account password the person could get would be a local administrative account, and no network information. Same goes for the sales person not getting a network admin password.

Darrell Mozingo

 

[mbroeder]

How do I make the registry edits to allow users to access a certain program. ie. What utility do I have to launch, regedit?
Thanks

 

[breader]

regedit
find the folder
right click it select Permissions and set them accordingly

 

[mbroeder]

I run regedit and find the folder under HKEY_LOCAL_MACHINE under Software. When I right-click the folder the only options I get are New, Find, Delete, Rename, and Copy Key name. There is nowhere to enter priveleges. This is where I am lost. Thanks

 

[breader]

Are you logged in as Administrator when you're doing this?
You can also find the Permissions Option under the Edit Heading at the top of the window.

 

[mbroeder]

I had to run regedt32 to gain access to the registry. I was able to maintain the permissions there. Unfortunately it didn't solve my problem so I have to call tech support. Thanks for your help.