Tim:
I try it your way created an GPO, I created an username:
test, he is only domain users, after I created GPO, I run
gpupdate, then login as test, then password, then try to
install one of our software call VNC, it say " Setup was
unable to create the directory "c:\program files\ReakVNC"
Error5: Access is denied.
What should I do.
thanks.
Lillian
>-----Original Message-----
>Have you tried configuring "always install with elevated
priveleges". This
>setting can be configured in a GPO. I've pasted
information about it below.
>
>Always install with elevated privileges
>Computer Configuration\Administrative Templates\Windows
Components\Windows
>Installer
>
>Description
>Directs Windows Installer to use system permissions when
it installs any
>program on the system.
>
>This policy extends elevated privileges to all programs.
These privileges
>are usually reserved for programs that have been
assigned to the user
>(offered on the desktop), assigned to the computer
(installed
>automatically), or made available in Add/Remove Programs
in Control Panel.
>This policy lets users install programs which require
access to directories
>that the user might not have permission to view or
change, including
>directories on highly restricted computers.
>
>If you disable this policy or do not configure it, the
system applies the
>current user's permissions when it installs programs
that a system
>administrator does not distribute or offer.
>
> Caution
>
>Skilled users can take advantage of the permissions this
policy grants to
>change their privileges and gain permanent access to
restricted files and
>folders. Note that the User Configuration version of
this policy is not
>guaranteed to be secure.
>
> Important
>
>This policy appears both in the Computer Configuration
and User
>Configuration folders. To make this policy effective,
you must enable the
>policy in both folders.
>
>
>--
>Tim Hines, MCSE, MCSA
> Windows 2000 Directory Services
>
>=====================================================
>When responding to posts, please "Reply to Group" via
>your newsreader so that others may learn and benefit
>from your issue.
>=====================================================
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>
>
>"Lillian" <(E-Mail Removed)> wrote in
message
>news:2c10b01c46927$ac8f73e0$(E-Mail Removed)...
>> I try to created an user using GPO and gave him or her
>> with full previledge just to install software, not
doing
>> any administrator's job, but not give him the
>> administrator's right, I know if assign the power user
>> right, he can not install MS office, is anyway we can
do
>> it in GPO?
>>
>> Thanks.
>>
>> Lillian
>
>
>
|
Similar Threads
