Tech Support Forum banner

Limited User install programs?

6818 Views 2 Replies 2 Participants Last post by  JimmySinger
Hi All,
I know by definition, a limited user can't alter the registry and therefore can't install multi-user applications and this is good; however, it would be nice to customize a limited user a little and in some cases make them not so limited. I don't want to make the user an Administrator. I need to allow them to install applications, but not allow them to change or see any other system settings. Is this possible?

I have looked at Group Policy settings (gpedit) but I can't see anything that will help me. Also I looked at .adm files but it appears this only adds or removes UI settings. Can anyone point me in the right directions? I've Googled for hours and can't find anything - perhaps that's my answer.

Regards
Jim
Status
Not open for further replies.
1 - 3 of 3 Posts
http://www.microsoft.com/resources/...oddocs/en-us/ua_c_account_types.mspx?mfr=true

Just two types of accounts. One that can install programs and one that cannot.

With Vista you will be able to install programs with a limited account, but you must enter the administrater password to do so. I understand that there is a way to do this with XP, and it was shown to me one time, but it was very convoluted.

EDIT: Hey, I just looked over my notes (I have quite a collection of notes that I have aquired over the years). I will simply post what I have and you can take it for what it's worth. I hope it helps:

The whole point of limited user is to prevent them from making these types
of system changes. You could temporarily promote them to adiministrator, or
you could try running the installer as administrator. To do the latter,
right click on the installer and select Run As... Change the selection from
Current user to "The following user" and select an administrator in the drop
list. This will require the entry of the password for the selected account.

If you are talking about XP Pro, there is a group policy that you could set
that always installs programs with elevated privileges. This policy is
under Computer Configuration/Administrative Templates/Windows
Components/Windows Installer in the group policy editor. There are several
other policies at the same place that you can tweak to give the users
additional control over the install, like selecting customized install
options, changing the install source, applying updates or patches.
See less See more
Thank you for your reply, Al

I have temporarily promoted someone before, but I don't want to give out the adminstrative password so that option won't work; however, I like your idea of elevating the privileges in Group Policy. I will invesigate this further. Providing I don't have to give out the Admin password, it should work.

Thanks again,
Jim
1 - 3 of 3 Posts
Status
Not open for further replies.
Top