Hi
I would like to give an application Local admin Permissions and still have
it so that the user does not. Can this be done please.
Thanks

> Hi
> I would like to give an application Local admin Permissions and still have
> it so that the user does not. Can this be done please.
> Thanks

Paul, you can try to "fix" the application by checking which locations it
reads/writes by using filemon and regmon from www.sysinternals.com and
change the ACLs on the objects it needs access to. Bear in mind that chaning
ACLs will make the object accessible to all applications.

Another solution, but not free, is our own NeoExec for Active Directory
which allows you to manage privileges, such as security group memberships
and user rights, on a per-applications basis.

cheers,

Marco
www.neovalens.com