Windows 2003 Installer always request high privileges to install but i don't configure it anywhere

  • Thread starter Thread starter ita.acco
  • Start date Start date
I

ita.acco

Hi all, in the last days i've rebuild from zero a small domain that i
administrate. Now, i'm configuring the client but each time that i try
to install something appears the pop-up that asking me to enter name
and password of an administrator otherwise i can not install the
software.
It could be right IF i've set up that option via Group Policy, BUT i
didnt!!
So how can i install software with "normal" users?!? There are others
points where i can configure that behavior further groups policy?!?
Any help will very appreciated!

Bye
 
Hello,

Are you installing with an account that already have administrator privilege
?

Standard users can't install software (no write access to HKLM & program
files)

In your older domain, were users local administrators via GPO ?


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"ita.acco" <acco.tn@gmail.com> wrote in message
news:1187538867.827595.49410@22g2000hsm.googlegroups.com...
> Hi all, in the last days i've rebuild from zero a small domain that i
> administrate. Now, i'm configuring the client but each time that i try
> to install something appears the pop-up that asking me to enter name
> and password of an administrator otherwise i can not install the
> software.
> It could be right IF i've set up that option via Group Policy, BUT i
> didnt!!
> So how can i install software with "normal" users?!? There are others
> points where i can configure that behavior further groups policy?!?
> Any help will very appreciated!
>
> Bye
>
 
On Aug 19, 6:00 pm, "Mathieu CHATEAU" <gollum...@free.fr> wrote:
> Hello,
>
> Are you installing with an account that already have administrator privilege
> ?
>
> Standard users can't install software (no write access to HKLM & program
> files)
>
> In your older domain, were users local administrators via GPO ?
>
> --
> Cordialement,
> Mathieu CHATEAUhttp://lordoftheping.blogspot.com
>
> "ita.acco" <acco...@gmail.com> wrote in message
>
> news:1187538867.827595.49410@22g2000hsm.googlegroups.com...
>
> > Hi all, in the last days i've rebuild from zero a small domain that i
> > administrate. Now, i'm configuring the client but each time that i try
> > to install something appears the pop-up that asking me to enter name
> > and password of an administrator otherwise i can not install the
> > software.
> > It could be right IF i've set up that option via Group Policy, BUT i
> > didnt!!
> > So how can i install software with "normal" users?!? There are others
> > points where i can configure that behavior further groups policy?!?
> > Any help will very appreciated!

>
> > Bye


Thanks for your answer! So...maybe i remeber wrong, cause in old
domain i've all standard users that can not install software (more for
security reasons regard malware and so on coming form internet, but
now the things are changed), but it seems to me that just at begining
standard users could install sw without admin privileges, but, repeat,
probablly i remeber a wrong thing.

But reading ur anwer i can understand that there is a way to make
standard users able to install software via GPO? How? Can u explain me
or give me some link to read about it?

Thanks a lot!
 
There isn't a gpo that say "Allow standard user to install software..", but
you can make users local admin of workstation, which is bad (from a security
point of view).

Instead, GPO allow you to distribute software through them, without
requiring that a use is local admin.
But setup must be an MSI to be installed through GPO.

How many workstation do you have ? From Microsoft product, you may buy SMS
that is perfect at installing software remotely (and many others things).

Depending of the number of workstation, software to install, skill you have
on hand, you may:
-install manualy on workstation
-Scripts/software/GPO to install remotely
-Use industry standard like SMS.
-Make all users admins. I put this as the last solution, as it really the
worst to me.

Some software may install anyway without administrator rights. This is
generaly poor setup, that require nearly nothing to work (no HKLM entry),
where the setup is just a "marketing" thing.


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"ita.acco" <acco.tn@gmail.com> wrote in message
news:1187540608.075964.268710@d55g2000hsg.googlegroups.com...
> On Aug 19, 6:00 pm, "Mathieu CHATEAU" <gollum...@free.fr> wrote:
>> Hello,
>>
>> Are you installing with an account that already have administrator
>> privilege
>> ?
>>
>> Standard users can't install software (no write access to HKLM & program
>> files)
>>
>> In your older domain, were users local administrators via GPO ?
>>
>> --
>> Cordialement,
>> Mathieu CHATEAUhttp://lordoftheping.blogspot.com
>>
>> "ita.acco" <acco...@gmail.com> wrote in message
>>
>> news:1187538867.827595.49410@22g2000hsm.googlegroups.com...
>>
>> > Hi all, in the last days i've rebuild from zero a small domain that i
>> > administrate. Now, i'm configuring the client but each time that i try
>> > to install something appears the pop-up that asking me to enter name
>> > and password of an administrator otherwise i can not install the
>> > software.
>> > It could be right IF i've set up that option via Group Policy, BUT i
>> > didnt!!
>> > So how can i install software with "normal" users?!? There are others
>> > points where i can configure that behavior further groups policy?!?
>> > Any help will very appreciated!

>>
>> > Bye

>
> Thanks for your answer! So...maybe i remeber wrong, cause in old
> domain i've all standard users that can not install software (more for
> security reasons regard malware and so on coming form internet, but
> now the things are changed), but it seems to me that just at begining
> standard users could install sw without admin privileges, but, repeat,
> probablly i remeber a wrong thing.
>
> But reading ur anwer i can understand that there is a way to make
> standard users able to install software via GPO? How? Can u explain me
> or give me some link to read about it?
>
> Thanks a lot!
>
 
Back
Top