managing user rights on vista

[sobriquet]

Hello.
Can anyone explain how to enable that users are able to download and
execute files, so they can install programs, while preventing access
to system folders like "C:\program files" and "C:\windows"?
Right now I have succeeded in configuring a user account so they can
write to the hard disk in most locations except system folders, but
when users try to run a program (in order to install it in a folder
where they are allowed to write files), they are still asked for a
password. So I want to disable that password somehow so users can run
and install programs without requiring an administrator password.

Kind regards and thanks in advance for any suggestions, Niek

 

[Gary Mount]

I know that you can turn UAC (User Account Control) off if that is what you
are looking for.
If that is what you are looking for, you can find out how to do it my typing
"uac" in the search box of the Windows Help and Support built into Windows
Vista and located on the Start menu.
Or go directly into the User Accounts in the Control Panel where you will
find "Turn User Account Control on or off"

 

[Bruce Chambers]

Hello.
Can anyone explain how to enable that users are able to download and
execute files, so they can install programs, while preventing access
to system folders like "C:\program files" and "C:\windows"?

It'd be impossible to install properly designed applications without
access to those folders.





--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

 

[sobriquet]

        It'd be impossible to install properly designed applications without
access to those folders.

Why? surely people can install programs in their own folder?
If a program asks whether to install in 'C:\program files', you can
point it
to (e.g.) 'D:\my folder' instead to install it there.

 

[Bruce Chambers]

Why? surely people can install programs in their own folder?
If a program asks whether to install in 'C:\program files', you can
point it
to (e.g.) 'D:\my folder' instead to install it there.

Because a properly designed (for the Win2K/WinXP/Vista security models,
at any rate) application will be written to install only to the
C:\Program Files folder. This is because allowing standard users to
install applications of any kind is contrary to the very basics of
computer security.


--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

 

[Sergio]

Hello,

This is because allowing standard users to install applications
of any kind is contrary to the very basics of computer security.

Well. Let me add that this is contrary to a peculiar interpretation of
computer security.

In general terms, there is no reason for forbid to install general purpose
applications in the personal user folders. And having the systems folders
suitably protected, I find that it's worse to install most of the general
purpose user applications using an administrator account, leaving files all
around.

Regards.

Sergio