Allow user to run a *.exe file from a USB key

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

We have several users with USB Drives. The drives come with encryption
software however, to use the software users require administrative rights to
the workstation. We cannot grant this right. I am looking for a work
around. Using Group Policies, can I grant users the administrative right to
run a particular *.exe file?
 
Hi,

Actually the software probably just needs some "write access" on one or two
files, not necessarily Admin access. There are a few ways to figure out what
files the users need to be able to write to. Just to start, run regedit and
give the users full control over the HKEY_Local_Machine - Software - Software
name of company key.

What I do is I login as an Admin, I look at the time, I run the application,
and then I do a search (all files including Windows files MUST be visible +
extensions) for all files modified today. I look at the time and it gives a
good idea of any files that have been just "written to". Ignore the system
files and anything with the .dat

I haven't found an app yet that "requires admin access" that I can't get
running under a regular user with just a few permissions tweeks.

Also, I have found with the USB drives, if I load the drives once as an
admin then the users can use them all the time after that.

Cheers,

Lara
 
Great advise. I will try this and let you know.

lforbes said:
Hi,

Actually the software probably just needs some "write access" on one or two
files, not necessarily Admin access. There are a few ways to figure out what
files the users need to be able to write to. Just to start, run regedit and
give the users full control over the HKEY_Local_Machine - Software - Software
name of company key.

What I do is I login as an Admin, I look at the time, I run the application,
and then I do a search (all files including Windows files MUST be visible +
extensions) for all files modified today. I look at the time and it gives a
good idea of any files that have been just "written to". Ignore the system
files and anything with the .dat

I haven't found an app yet that "requires admin access" that I can't get
running under a regular user with just a few permissions tweeks.

Also, I have found with the USB drives, if I load the drives once as an
admin then the users can use them all the time after that.

Cheers,

Lara
Click to expand...
 
=?Utf-8?B?bGZvcmJlcw==?= said:
Hi,

Actually the software probably just needs some "write access" on one or
two files, not necessarily Admin access. There are a few ways to figure
out what files the users need to be able to write to. Just to start, run
regedit and give the users full control over the HKEY_Local_Machine -
Software - Software name of company key.

What I do is I login as an Admin, I look at the time, I run the
application, and then I do a search (all files including Windows files
MUST be visible + extensions) for all files modified today. I look at
the time and it gives a good idea of any files that have been just
"written to". Ignore the system files and anything with the .dat

I haven't found an app yet that "requires admin access" that I can't get
running under a regular user with just a few permissions tweeks.
Click to expand...

Excellent advice.
The other great tools to assist in doing this are regmon and filemon from
sysinterals.com.
 
Back
Top