I have three apps that users are required to use that must have local
administrator access to run. I'm not sure what they need admin access
for yet but they certainly won't run without it.

I have a reluctance to grant every user that runs these apps local
admin access (especially with all the sypware out there now.)

I've tried RUN AS but that doesn't grant enough privaleges apparently
as they won't run under "Run As".

Is there a way I can grant admin access to ONLY the application(s) and
not the users in general? I can't count the hours I've spent trying to
remove spyware and dopy apps some of these users d/l or bring in from
home.

-Fran-

Try setting up failure auditing on the local machine hive. Run regedt32.exe
then browse to HKLM, then
Edit|Permissions|Advanced|Auditing|Add|"everyone"|OK then check the "Failed"
box on Full Control, Set Value, Create Subkey, Enumerate Subkey, Delete,
Create Link

Then try again logged on as a normal user. Then check the Event log security
for errors.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

"Fran >" wrote:
|I have three apps that users are required to use that must have local
| administrator access to run. I'm not sure what they need admin access
| for yet but they certainly won't run without it.
|
| I have a reluctance to grant every user that runs these apps local
| admin access (especially with all the sypware out there now.)
|
| I've tried RUN AS but that doesn't grant enough privaleges apparently
| as they won't run under "Run As".
|
| Is there a way I can grant admin access to ONLY the application(s) and
| not the users in general? I can't count the hours I've spent trying to
| remove spyware and dopy apps some of these users d/l or bring in from
| home.
|
| -Fran-