best way to install apps when logged in user is domain user only

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I need assistance on the best way to give a regualr admin rights to install
small patches or fixes of programs that we use. I am familiar with the run
as command. Is there a way to create a batch file to execuate a program as
an admin? And is it possible to include the admin password in the batc file
so that the regulaer user does not need to know the password?
If there is a better way aside from purchase 3rd party software (unless its
a freebie, of course) please let me know.
 
Hi there

If you're using Active Directory, it's preferable to use Group Policy
computer startup scripts (which run in the context of the machine and hence
have rights to install software), or using the features of Group Policy to
assign MSI files.

Anyway, if you really want to use a user login script to install software to
a machine, take a look at the "cpau" utility from fellow MVP Joe Richards.

http://www.joeware.net/win/free/tools/cpau.htm

It allows the "encryption" of the credentials so that a user cannot easily
get the password. As Joe says on the web page above, it's not strong
encryption -- just obfuscation. If someone *really* wants the password,
they can get it, but unless you're really following best practices in terms
of security, there are probably much easier ways for your users to hack your
network.

Hope this helps

Oli
 
Back
Top