Regarding Domain User Rights

[Guest]

Hi,

I want to grant a right or permission to all my users to install only
Software application. but normal domain user on DC does not have these rights.
So every time ( whenever i need to install some S/W ) i ask them to log off,
So that i can login with Admin Privilage user and install OR to using RUNAS.
And If I add them to Domain Admin group they get all rights,( e.g. they can
change time,IP Address, etc, etc. that they are not suppose to be.

any guidence on this shall help me me a lot.

Thanks.

Vicky

 

[Guest]

Starting from Windows 2000, normal users are no longer able to install
programs that modify the HKLM registry or the system files.

You need to have Power User or above privilege to do so.

An alternative is to apply the Compatws.inf security template
(\Windows\security\templates) on the system to "downgrade" itself so that
user don't need to have the Power User privilege to install. But MS don't
recommend to use this method.

HTH.

 

[Guest]

Hi,

I did not understand what you have said, Please make it more clear, what I
need to do with Compatws.inf file.? I am using Win2K Pro on all workstations.

Thanks,

Vicky.

 

[Guest]

This is a security template which you need to apply on your PC. The steps are
rather lengthy but I try my best to list out all possible steps.

1. run mmc
2. File -> Add/Remove snap-in
3. Add -> select Security Configuration and Analysis
4. Add -> go back to mmc console
5. right-click on Security Configuration and Analysis -> Open Database
6. give a name for the database file
7. from the import template dialog box, choose the template from
c:\windows\security\templates\compatws.inf -> click Open
8. right-click on Security Configuration and Analysis -> Configure Computer
Now

Now your system should have been "downgraded" to be less secure.

P/S: need administrative privilege to perform this task.

HTH.