General discussion

Locked

Allow NT users to install programs

By alanb ·
I am attempting to have users install & upgrade antivirus software via login scripts.

This requires that all users are allowed to install programs (ie update registry).

How can I relax this restriction in NT?

I have checked in User Rights, and Policy Editor but nothing jumps out at me.
As we have a mixed group of users I do not want to enforce programs that can be run in Policy Editor.

Thanks in advance,
AlanB

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Allow NT users to install programs

by Stoop In reply to Allow NT users to install ...

The easyist way with NT workstation is to make them a part of the local administrators, or power users group.

Collapse -

Allow NT users to install programs

by alanb In reply to Allow NT users to install ...

Poster rated this answer

Collapse -

Allow NT users to install programs

by Slora In reply to Allow NT users to install ...

Another workaround (if you have trustworthy users but do not want to grant them permanent permission to install software) is to create a special username such as "VirusUpdate" that is a member of the Domain Administrators group.

Tell all users tolog in under this username to perform the update. Call Shutdown.exe from the Resource Kit at the end of the login script for the VirusUpdate user so that their computer automatically reboot and so that they do not stay logged in with elevated privileges.

You can use "Account" in User Manager for Domains to expire the account automatically at the end of the day or week you are performing the upgrade.

A thought to consider, though:
If you have enough user installations where you need theirhelp, you might consider getting an antivirus package that has client rollout tools. You won't have to pay much extra to get a lot of automated help with your rollouts and updates.

Collapse -

Allow NT users to install programs

by alanb In reply to Allow NT users to install ...

Not exactly the route I wanted to take, but the shutdown suggestion would get around the fact that users have to be given admin priviliges.

Collapse -

Allow NT users to install programs

by Zephyros In reply to Allow NT users to install ...

I've used Computer Associates' INOCULAN to do automatic updates. Once the software is installed on all clients, updates require no user intervention at all. The clients are configured to look to a particular server or other PC for updates. You then have only to update the one machine and the others will get it. Other antivirus packages probably have similar features.

Collapse -

Allow NT users to install programs

by alanb In reply to Allow NT users to install ...

Poster rated this answer

Collapse -

Allow NT users to install programs

by alanb In reply to Allow NT users to install ...

This question was closed by the author

Back to Windows Forum
7 total posts (Page 1 of 1)  

Operating Systems Forums