Discussion Locked

Group Policy

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to allow all authenticated users to have elevated software installation priviledges without making they adminstrators everytime they do periodic updates to some proprietary software that we use. The software does call the windows installer.

In the group policy I have enabled elevated priviledges in both the User and Computer configurations - to no avail.

8 replies

by azizhakim

Container where gpo is implemented,I cannot recall where but there is an option to have the Windows installer Service install with elevated priveledges.look into that.I will research that and repost.Enable that option.hope it helps

by wdjacks

I found where to change the setting. It is in AD, Group policies - Admin Template - Windows components. It needs to be set for both the Computer, and User configurations. I just can't get it to work.

by elovejoy

Just give the users administrative rights to the folder of the program that you want them to be able to update.

This should enable them to make changes and updates that you require.

by beermonster

Hi,
Firstly, have you checked the machines themseleves to confirm that the flags have been correctly set by the GPO

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer

The alwaysinstallelevated value will be 1 on both if the setting has applied correctly.

by wdjacks

Thank You. I have verified that both flags mentioned are set to (1). I checked 2 different machines 1)Windows XP 2)Windows 2K - both hvae the flag set properly. I did notice, however - that there was another setting on the machine "ENABLE USER CONTROL" - whose flag was (0). Any other suggestions - since the flags are correct?

This discussion is closed to new replies.