User and application rights

[Rookcr]

Hello, I am currently missing a small step somewhere. I have aan NT 4.0 network. Currently placing some 2000pro machines into our population. I am running into problems with local rights installing some software. It needs to be installed as admin but I don't want to give the local user admin privilages. Example. Palm software will not hot sync becuase it needed to be installed as admin and then the user cannot sync. I have set the Install with elevated privilages but I need some help.

Thanks in advance..
Rook

 

[niki43]

I am having the same problems, I hope someone can help.

 

[prescot9]

Rookcr,

It's a fact: Your users will need "local" admin rights, (in some cases - Power User), to install some software for their use. Either install the software while logged on as the local Administrator, or use the "Run As" command to do so logged on as the user.
Some software, (such as Iomega's), claims to install correctly when setup is run as a user with Admin rights, and then you find out the truth: Those particular registry keys don't get the correct permissions anyway - so it is a "crap-shoot" either way.

You could escalate the user's permission level temporarily, too: Add this user's Domain account to the local Administrators group, then revoke that permission once the ticklish software programs are all installed. Let Me Know!

Rich
prescot9@hotmail.com
Father, Geek, and MCP

 

[Rookcr]

Well that is what I ended up doing. Hopefully I will be able to eliminate this when we movie to a fully fledged Active Directory enviroment.

 

[prescot9]

Rookcr,

Yeah, no question that AD rulz. You can publish the apps, then do your GPO's...slick as a whip!!!

Good Luck! Let Me Know!

Rich
prescot9@hotmail.com
Father, Geek, and MCP

 

[mlevine]

Just my 2 cents.. At my place we have a similar issue, we will actually goto the users machine, give the local rights as admin. Then using their login, install the software.. (mainly for registry reasons), run the proggie.. then remove them from the Local admin.. either at the machine, or use MMC.

(Opps, prescot's remarks were similar.. need to read slower )