managing user rights on vista

  • Thread starter Thread starter sobriquet
  • Start date Start date
S

sobriquet

Hello.
Can anyone explain how to enable that users are able to download and
execute files, so they can install programs, while preventing access
to system folders like "C:\program files" and "C:\windows"?
Right now I have succeeded in configuring a user account so they can
write to the hard disk in most locations except system folders, but
when users try to run a program (in order to install it in a folder
where they are allowed to write files), they are still asked for a
password. So I want to disable that password somehow so users can run
and install programs without requiring an administrator password.

Kind regards and thanks in advance for any suggestions, Niek
 
I know that you can turn UAC (User Account Control) off if that is what you
are looking for.
If that is what you are looking for, you can find out how to do it my typing
"uac" in the search box of the Windows Help and Support built into Windows
Vista and located on the Start menu.
Or go directly into the User Accounts in the Control Panel where you will
find "Turn User Account Control on or off"


"sobriquet" wrote in message
news:c35ec703-7c2b-49ec-b8a1-3b322507bb64@b1g2000hsg.googlegroups.com...
>
> Hello.
> Can anyone explain how to enable that users are able to download and
> execute files, so they can install programs, while preventing access
> to system folders like "C:program files" and "C:windows"?
> Right now I have succeeded in configuring a user account so they can
> write to the hard disk in most locations except system folders, but
> when users try to run a program (in order to install it in a folder
> where they are allowed to write files), they are still asked for a
> password. So I want to disable that password somehow so users can run
> and install programs without requiring an administrator password.
>
> Kind regards and thanks in advance for any suggestions, Niek
 
sobriquet wrote:
> Hello.
> Can anyone explain how to enable that users are able to download and
> execute files, so they can install programs, while preventing access
> to system folders like "C:program files" and "C:windows"?


It'd be impossible to install properly designed applications without
access to those folders.





--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
 
On 13 apr, 17:57, Bruce Chambers wrote:
> sobriquet wrote:
> > Hello.
> > Can anyone explain how to enable that users are able to download and
> > execute files, so they can install programs, while preventing access
> > to system folders like "C:program files" and "C:windows"?
>
>         It'd be impossible to install properly designed applications without
> access to those folders.

Why? surely people can install programs in their own folder?
If a program asks whether to install in 'C:\program files', you can
point it
to (e.g.) 'D:\my folder' instead to install it there.

>
> --
>
> Bruce Chambers
>
> Help us help you:http://www.catb.org/~esr/faqs/smart-questions.html
>
> http://support.microsoft.com/default.aspx/kb/555375
>
> They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety. ~Benjamin Franklin
>
> Many people would rather die than think in fact, most do. ~Bertrand Russell
>
> The philosopher has never killed any priests, whereas the priest has
> killed a great many philosophers.
> ~ Denis Diderot
 
sobriquet wrote:
>
> Why? surely people can install programs in their own folder?
> If a program asks whether to install in 'C:program files', you can
> point it
> to (e.g.) 'D:my folder' instead to install it there.
>

Because a properly designed (for the Win2K/WinXP/Vista security models,
at any rate) application will be written to install only to the
C:\Program Files folder. This is because allowing standard users to
install applications of any kind is contrary to the very basics of
computer security.


--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot
 
Hello,


> This is because allowing standard users to install applications
> of any kind is contrary to the very basics of computer security.

Well. Let me add that this is contrary to a peculiar interpretation of
computer security.

In general terms, there is no reason for forbid to install general purpose
applications in the personal user folders. And having the systems folders
suitably protected, I find that it's worse to install most of the general
purpose user applications using an administrator account, leaving files all
around.

Regards.

Sergio
 
Back
Top