Setup a Network share which users can install apps from

[mlchris2]

It would be really nice if I could setup a directory on my file server and place installs for Office, IE, drivers, etc and allow users to install apps from this directory, without having to be local admin, etc.

Any way to do this?

Mark C.

 

[Techguy2009]

yes, just create the share you want your users to look at
(pc\install for example)

then put your install files in there, I would use a folder for each cd you copy or each setup file.

change the share premissions to allow read from your domain users or whoever you want to have access.

I would also add the security premissions to allow read as well.

That should do it for ya.

 

[cmeagan656]

@Techguy2009

That will allow users to read the install files but they wouldn't be able to install the programs without having local admin permissions for their computer or being a domain admin.

Hope this helps.

Please help us help you. Read Tek-Tips posting polices before posting.

 

[mlchris2]

Ditto to what cmeagan656 stated.

to clarify... I have a shared folder created already and users have access to Read/Execute files from this folder.

Due to users not being local or domain admins, they cant install. Anyway to get around this other than making changes to local or domain security groups.

Can I do this via GPO... How bout local policy modification?

Mark C.

 

[58sniper]

GPOs are the best way to do it. They run at machine startup, and don't require the user to have admin rights. It also allows you to secure your install share so that only machines can see it, and not users. That way, someone's not poaching your software.

Software, printers, config - all possible and quite easy via GPO.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[mlchris2]

58sniper,

I would love to do things via GPO, but the only thing I've found that is close is this;

http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Deploy-Applications.html

However, it would require that I create MSI installs for each application, etc. I can work around creating the MSI packages, but that still leaves me with issues with driver packages. I was hoping to find something a little less complicated.

I did some searching last night and found a utility called "makemeadmin". I will be testing it today as I think it will work.

Mark C.

 

[drewdown]

This shouldn't be that hard, I have a software share on our domain, permissions are set for a local group on the server that has read/write,read&execute permissions on that share. Domain users can install programs from that folder.

Is this on a domain?

 

[Lemon13]

http://translate.google.com/transla...active&ie=UTF-8&oe=UTF-8&prev=/language_tools

M. Knorr

MCSE, MCTS, MCSA, CCNA

 

[mlchris2]

drewdown,

yes this is a domain. I have the share setup exactly as you do,users can execute the installs, they just error and say you need admin rights to install. Im guessing due to some local permissions on the pc.

Lemon13,

thanks, i will read up on this too.



Mark C.

 

[drewdown]

So they aren't local admins on their local machines?

 

[mlchris2]

drewdown,

no they are not. I'd rather not give them admin priv to their pc's for obvious reasons... ability to install random apps, etc. it violates our Network Security policy.

Mark C.

 

[drewdown]

Ok makes sense now. I don't know of a way around that then.

You might be SOL installing all the apps yourself. Also what do they need to install that isn't already installed when they are given their workstation? Just curious as to what problem you are trying to solve. If you don't want them installing random programs but they need to install programs after the fact I am curious as to why.

 

[mlchris2]

it's more of a situational issue. Sometimes I've had to reinstall or repair Office 2007 or updates to apps our end users use. I have to have the user log off and I log in and perform the task at hand. It's just a pain in the ace!

I was hoping to find some easy way around this. It's not so much a problem, just a pain the way I have to update/install apps.



Mark C.

 

[drewdown]

If its a large environment use MOM (now SCOM). Or just change your network policy and allow people to install it themselves and write in what is and isn't allowed.

Otherwise I am not sure of way to accomplish removing the mundane task of logging them in/out and doing the install yourself.

 

[mlchris2]

if I allow users to install ANYTHING, then I have to worry about monitoring and auditing desktops, not to mention fix and repair desktops that have loads of unnecessary software on them. That is a huge task. We are still kinda small and don't really have the funds to implement a desktop auditing solution at this time. although I appreciate the idea, not really the best course of action for anyone doing system administration.

Ive decided to try group policy and MSI installer packages. I've purchased a MSI package creation software and testing. Seems to be working fine within Group Policy.

Mark C.

 

[Roadki11]

If you want monitoring and auditing on the cheap look into this:

http://www.spiceworks.com/

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[mlchris2]

Excellent. I will check it out.

Mark C.