Discussion Locked

w2k pro software install rights

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i want to give a user or group (doesn't matter) the right to install software only. i don't want this person to be able to change network settings or hardware config, just install software. i can't find it in local policy settings... so help?
thanks!

3 replies

by beermonster

Hi,

I assume that adding your users to the power users group hasn't worked for you...If your users are installing ONLY msi packages (which you can create yourself if needs be) then you can tell the OS to always install msi's as admin by setting the

' Always install with elevated privileges'

policy in the gpo, which exists in both the user and the computer sections at -

Administrative Templates\Windows Components\Windows Installer.

If you are dealing with non msi installs, then you might find that applying the nt4 security format to your workstations works - search at
www.microsoft.com/technet

for "compatws.inf" for more info. Obviously both of these options severely lessen the secutity on your machine. In your shoesI'd make users come to your dept if they want anything installed, that way you retain control of what does or doesn't go on your desktops.

This discussion is closed to new replies.