User's Rights

[Daniel Resnde]

Hi all,

I need to change a right/directive for an user that is
member of user's group in a Windows XP Pro.
This user has to have privilidges to install the flash
player plug-in, but he must not be a member of
administrators and advanced users group.

This is possible? How do I do this?


Thanks in advanced,

Daniel Resende
Support Analist
Belo Horizonte - MG - Brazil

 

[Smile Extender]

That depends on installer. Many installers which needs to update
HKEY_LOCAL_MACHINE registry hive checks that user is local administrator. So
even if you give registry permissions and user right to that user, he cannot
install that software. If the software uses microsoft installer, you can
customize installer behaviour such that normal user can install programs
which normally requires administrative user rights. Run
C:\WINDOWS\system32\gpedit.msc and look for Windows Installer.

 

[Daniel Resende]

No, the software do not use MSI.
Do you know anywhere (in Microsoft's site for instance) that say that a user
couldn't install a software that ask for a administrator for the
installation?

I have to show a report to my directors that ins't possible to do that or is
not advisable.
Do you know one?

Thanks again

 

[Smile Extender]

There are many software which doesn't require local administrative rights
when installed. It depends how the installer has been built. Unfortunately
many applications are written to require administrative rights even if they
really don't need them. If you can get contact to company which has written
flash player plugin, you could ask if there is way to install it as a normal
user.

You could also use sysdiff to track what installing that program does to
windows. Sysdiff is deployment utility from Microsoft. With it you can take
snapsot of windows, install something and take new snapshot and compare what
has changed. That reveals all changes. Then checking those changes you can
determine if installing really requires local administrative rights. And if
not, you might be able build your own install package. Of course, that
requires some work.