Group Policy software deployment

  • Thread starter Thread starter Simone
  • Start date Start date
S

Simone

I am installing software via group policy assigned
software that needs to edit the registry but the domain
account does not have local permissions so the
installation fails. How can I give the domain account
local permissions without manually setting up a local
account with the same name as the domain account and
giving it the proper permissions.
 
Have you tried specifying the policy setting to install apps with elevated
priveleges? See the setting below

Always install with elevated privileges
User Configuration\Administrative Templates\Windows Components\Windows
Installer

Description
Directs Windows Installer to use system permissions when it installs any
program on the system.

This policy extends elevated privileges to all programs. These privileges
are usually reserved for programs that have been assigned to the user
(offered on the desktop), assigned to the computer (installed
automatically), or made available in Add/Remove Programs in Control Panel.
This policy lets users install programs that require access to directories
that the user might not have permission to view or change, including
directories on highly restricted computers.

If you disable this policy or do not configure it, the system applies the
current user's permissions when it installs programs that a system
administrator does not distribute or offer.

Caution

Skilled users can take advantage of the permissions this policy grants to
change their privileges and gain permanent access to restricted files and
folders. Note that the User Configuration version of this policy is not
guaranteed to be secure.

Important

This policy appears both in the Computer Configuration and User
Configuration folders. To make this policy effective, you must enable the
policy in both folders.

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top