Installed applications need admin privileges

[Katharine]

How can I set up user profiles so that the
software "thinks" the user has administrator privileges?
And, if I set up Admin privileges locally, but not through
the network, when they log on to our domain, will Win2k
recognize that they have admin privileges to their local
computer but not on the network?

Here at the University, we have many apps that require
more and more access to file structure and registry. The
software companies tell us our users need to have
administrative permissions. We have far too many users
and privacy issues to allow for this kind of blanket
policy.

Thanks!

 

[wcrouse]

It's unlikely any programs actually require full admin rights for the
user. More likely the software needs the right to one key in the
registry, or one time to system 32. For instance, using some Adobe
software, I need give users full rights to the local
machine\software\adobe key. Another programs needs the admin to run it
the first time only, so that it can make a one time write to
winnt\system 32. I suggest you explore in more detail exactly what
this software is doing. Bottom line, no well written software will
require user admin rights period.

 

[Matthew Wetmore [MSFT]]

This is really the approach you want to take. The software vendor should be
able to document for you which registry keys and files are needed for their
application, rather than making them full admins. You should tread very
carefully with software that won't meet that requirement - I'd wonder what
else wasn't documented or understood well.

If it's simply a matter of getting the software installed - many
applications require administrative privileges for install - there are many
solutions for that piece of the problem. The Windows Installer provides
mechanisms for privileged installs, and there are other software
distribution methods that address this.