configuring group policies to run sql server,win2k live update etc.

[Akhlaq Khan]

I am facing difficulty configuring group policy for the software developers
in my office. Their accounts in the DC are included in the "Users" group.
with no group policy applied on thier OU, they are facing following problems
after logging in to thier workstations ...

1. They are unable to start SQL SERVER Services installed on thier local
workstations.. ( Error:=> Access is denied) ( sometimes they need to
locally debug test applications and hence they need it)
2. They dont have rights to run norton Anti Virus Live Update.
3. They dont have rights to run Windows Live Update.

I want to give them rights to do the above mentioned tasks. Can anybody
please tell me what policies should i configure for thier OU that will allow
them to do these tasks ?

Thanks ...

regards,
akhlaq khan

 

[Jeremy]

That sounds like local rights issues. I would test to
see if making them a local admin lets them do these
things. If that does, then it is probably registry
permissions. Use something like regmon from Systernals
to see if you could determine those registry keys then
give users full access to them. Unless you are
comfortable with them being local admins, then leave it
at that.