Allow user to run a *.exe file from a USB key

[Guest]

We have several users with USB Drives. The drives come with encryption
software however, to use the software users require administrative rights to
the workstation. We cannot grant this right. I am looking for a work
around. Using Group Policies, can I grant users the administrative right to
run a particular *.exe file?

 

[Guest]

Hi,

Actually the software probably just needs some "write access" on one or two
files, not necessarily Admin access. There are a few ways to figure out what
files the users need to be able to write to. Just to start, run regedit and
give the users full control over the HKEY_Local_Machine - Software - Software
name of company key.

What I do is I login as an Admin, I look at the time, I run the application,
and then I do a search (all files including Windows files MUST be visible +
extensions) for all files modified today. I look at the time and it gives a
good idea of any files that have been just "written to". Ignore the system
files and anything with the .dat

I haven't found an app yet that "requires admin access" that I can't get
running under a regular user with just a few permissions tweeks.

Also, I have found with the USB drives, if I load the drives once as an
admin then the users can use them all the time after that.

Cheers,

Lara

 

[Guest]

Great advise. I will try this and let you know.

Hi,

Actually the software probably just needs some "write access" on one or two
files, not necessarily Admin access. There are a few ways to figure out what
files the users need to be able to write to. Just to start, run regedit and
give the users full control over the HKEY_Local_Machine - Software - Software
name of company key.

What I do is I login as an Admin, I look at the time, I run the application,
and then I do a search (all files including Windows files MUST be visible +
extensions) for all files modified today. I look at the time and it gives a
good idea of any files that have been just "written to". Ignore the system
files and anything with the .dat

I haven't found an app yet that "requires admin access" that I can't get
running under a regular user with just a few permissions tweeks.

Also, I have found with the USB drives, if I load the drives once as an
admin then the users can use them all the time after that.

Cheers,

Lara

 

[Andrew Mitchell]

Hi,

Actually the software probably just needs some "write access" on one or
two files, not necessarily Admin access. There are a few ways to figure
out what files the users need to be able to write to. Just to start, run
regedit and give the users full control over the HKEY_Local_Machine -
Software - Software name of company key.

What I do is I login as an Admin, I look at the time, I run the
application, and then I do a search (all files including Windows files
MUST be visible + extensions) for all files modified today. I look at
the time and it gives a good idea of any files that have been just
"written to". Ignore the system files and anything with the .dat

I haven't found an app yet that "requires admin access" that I can't get
running under a regular user with just a few permissions tweeks.

Excellent advice.
The other great tools to assist in doing this are regmon and filemon from
sysinterals.com.