user unable to install or run app

select the exe of the program you want them to run,,,right click, select properties and go to the security tab,, the you can give the user permisions just to run this program.
Not sure if this is what you want to do but its worked for me.
good luck

Win2000 comes with a new feature called Run As...

You may therefore set up a temporary account (perhaps valid for a week) with enough privileges that will enable this account to set up new software. (Usually membership in Power Users local group solves the problem).

Set a network share with software and setup program.

Instruct users to navigate to that share. They should hold Shift key and right click on the setup.exe (or similar setup program). A menu will appear. Users should choose Run As... and supply user name and password that you prepared just for installation purposes.

If all your clients are Win2000 Professional and you have Win2000 server with Active Directory, there is even better way.
You may use Active Directory to publish or assign software to your users or computers.
You can find more info on this at http://www.microsoft.com/technet

Funnily enough I've spent most of the last month troubleshooting these issues for a company rolling out 2000 with legacy apps. Thankfully, it is usually the case that the user only requires rights to the particular keys that your app creates. The best method I have found is to download regmon from www.sysinternals.com, log in as admin (you have to be admin to run regmon) start regmon (preferably filtered to only look at your apps activity) then use runas to start the app as one of your users. You will see from the regmon gui what registry keys the app is trying to access and what it is being denied access to. These are the keys you need to open (for file access problems do the same thing with filemon). Personally, I have no great issue with opening out specific keys to the users. Mine are very locked down (IE no registry tools etc ) and, as I've said already, the key's I open up are only for that specific piece of software so theres VERY little damage they can do anyway - after all ifthey can't access a registry editor then what can they do ? even a virus is very very unlikely to target a third party apps registry set. Now, how to open it up... If you are using GPO then your life is going to be very easy, edit the group policy for the ou that your machines are in (or move them from the computers container to their own OU if you haven't already), the setting is in computer settings, security, registry. Here you can select individual keys and apply security to them, which thepc's will pick up either straight away when rebooted, or after a period of time when they will do a background refresh (you can do the same thing for individual files or folders as well. If no GPO then it's a visit to the machines or an automated rollout - a login script won't work as that will run in the users context and fail.Good Luck !

run regedt32 and go to local machine keys
then select the app that you want to run.then up on the top there will be a permisions tab and you can give the users full control permissions to the dlls and the whole folder if you wish

That's sort of right but a bit sketchy. having established which keys you need to open by using regmon, open regedt32 (note NOT regedit - you can't alter security with that) and locate the key in question. This should always be under "hive key localmachine\software" . There will usually be something akin to a folder structure that your app has created. At this point you can try and pin down the precise level of security required, or you can just give users full control of the root of the apps folder structure if thats easier. as the previous respondent said, select the security tab off the menubar to open a menu to change security.

This question was closed by the author