Allowing a Limited Account to Install Software

B

Blue Sky

Here is the scenario:

I have one limited account on a windows XP machine. I would like to
allow this user to download and install software just this.

Would one way be to enable this limited account is to sign into the
administator account on the same computer and then add the limited
account to the group of administrators ? Like the following......

Start -> Run -> compmgmt.msc -> Local Users and Groups -> Groups ->
Administrators -> Add -> Name of Limited Account User

LASTLY

I would not mind knowing how to do this using Group Policy Editor. If
someone could help (with links or tutorials) me sort this out using
GPE it would be nicely appreciated.

Thanks
 
M

Mark Dormer

You can try adding the user to the local machines Power User group or
administrators group.
At least they get no extra rights in your domain(if you have one)

you could use RunAs
Open a cmd prompt and type runas /? and press enter for help.
eg. runas /profile /user:tempadmin c:\somepath\setup.exe

Create a new account for this so they don't get the administrator password,
lets call it tempadmin, assign it administrator rights
This will prompt for the password and is more secure as it isn't in plain
text in a file but bear in mind the user has access to an admin account
which they could login with unless you take other steps

Run GPEDIT.msc
Navigate to Computer Configuration - Admiistrative Templates - Windows
Components - Windows Installer
Set "Always install with elevated privileges" to Enabled

It only works for Windows Installers files though.

Regards
Mark Dormer
 
B

Blue Sky

Here is the scenario:

I have one limited account on a windows XP machine. I would like to
allow this user to download and install software just this.

Would one way be to enable this limited account is to sign into the
administator account on the same computer and then add the limited
account to the group of administrators ? Like the following......

Start -> Run -> compmgmt.msc -> Local Users and Groups -> Groups ->
Administrators -> Add -> Name of Limited Account User

LASTLY

I would not mind knowing how to do this using Group Policy Editor. If
someone could help (with links or tutorials) me sort this out using
GPE it would be nicely appreciated.

Thanks

Many thanks for the help. I'll take it from here.
 
B

Blue Sky

You can try adding the user to the local machines Power User group or
administrators group.
At least they get no extra rights in your domain(if you have one)

you could use RunAs
Open a cmd prompt and type runas /? and press enter for help.
eg. runas /profile /user:tempadmin c:\somepath\setup.exe

Create a new account for this so they don't get the administrator password,
lets call it tempadmin, assign it administrator rights
This will prompt for the password and is more secure as it isn't in plain
text in a file but bear in mind the user has access to an admin account
which they could login with unless you take other steps

Run GPEDIT.msc
Navigate to Computer Configuration - Admiistrative Templates - Windows
Components - Windows Installer
Set "Always install with elevated privileges" to Enabled

It only works for Windows Installers files though.

Regards
Mark Dormer

Mark I have one more questiion if you don't mind helping out. The part
of the above instructions about Run GPEDIT.msc are fine but afterwards
logging back as the limited user I still was not able to install any
windows based installations. Is there something more that needs to be
done to allow the limited account to be able to install software.

Thanks
 
M

Mark Dormer

You can try adding the user to the local machines Power User group or
administrators group.
At least they get no extra rights in your domain(if you have one)

you could use RunAs
Open a cmd prompt and type runas /? and press enter for help.
eg. runas /profile /user:tempadmin c:\somepath\setup.exe

Create a new account for this so they don't get the administrator password,
lets call it tempadmin, assign it administrator rights
This will prompt for the password and is more secure as it isn't in plain
text in a file but bear in mind the user has access to an admin account
which they could login with unless you take other steps

Run GPEDIT.msc
Navigate to Computer Configuration - Admiistrative Templates - Windows
Components - Windows Installer
Set "Always install with elevated privileges" to Enabled

It only works for Windows Installers files though.

Regards
Mark Dormer

Mark I have one more questiion if you don't mind helping out. The part
of the above instructions about Run GPEDIT.msc are fine but afterwards
logging back as the limited user I still was not able to install any
windows based installations. Is there something more that needs to be
done to allow the limited account to be able to install software.

Thanks


To use the feature the installer must NOT just be windows based, but Windows Installer based.

IS that the case?
 
B

Blue Sky

Mark I have one more questiion if you don't mind helping out. The part
of the above instructions about Run GPEDIT.msc are fine but afterwards
logging back as the limited user I still was not able to install any
windows based installations. Is there something more that needs to be
done to allow the limited account to be able to install software.

Thanks

To use the feature the installer must NOT just be windows based, but Windows Installer based.

IS that the case?

--
Regards
Mark Dormer- Hide quoted text -

- Show quoted text -

Thanks Mark.

I honestly don't know the difference but if you could point me towards
an application that I can download and which is Windows Installer
based I would be happy to test it. If this helps I tried downloading
the following program Windows Installer based http://www.belarc.com/free_download.html
and it would not install.

Victor.
 
B

Blue Sky

Have you tried right-clicking on the exe file and choosing "run as"?

Yep the command works with an administrator account but not with the
limited user account. Thanks for the help.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top