Brian,
installing applications is tricky as most setup applications check whether
the user is a member of the local administrators group and often require OS
privileges not held by regular users. Running applications that at runtime
requires elevated privileges is a bit easier, though not always possible.
You can often make applications run by running tools like filemon and regmon
(both free from
www.sysinternals.com ) but at the expense of reduced
security: making portions of the registry or file system writable to users
makes them also writable to malware.
One alternative, not free, is our own NeoExec for Active Directory which
allows you to define per-application policies and elevate or remove
privielges as needed.
cheers,
--
Marco [
www.neovalens.com ]
--
Brian Gregory said:
Is there a way to allow a normal Active Directory user running Windows XP
to
install and run an application that requires Admin Rights.