Users rights

  • Thread starter Thread starter Qaisar Nadeem
  • Start date Start date
Q

Qaisar Nadeem

I wana Give a users installation rights but the user
should be prevented to perform other administrative tasks.
For this purpose to which group the user should be added.
 
Qaisar Nadeem said:
I wana Give a users installation rights but the user
should be prevented to perform other administrative tasks.
For this purpose to which group the user should be added.
Click to expand...

There is no general or specific "installation right".

There are rights for installing things like printers and
drivers -- but users shouldn't be doing that anyway.

Installation of Programs (non driver/non service) is always
possible for a user who can 1) read from the source and
2) write to the file system.

Ok, technically the user must also be able to ensure the
execute permission but if they write locally it is nigh impossible
to stop the owner of the file from setting the "execute"
permission.

You could approach the problem through eliminating their ability
to read/run executables from floppies, CDs, and the network including
the Internet -- but just re-read those sources and consider how
hard that list will be to enforce on YOUR users.
 
Installation rights on his workstation/domain controller/member server ?
Basically installing software means writing to specific operation system
folders and HKEY_LOCAL_MACHINE part of the registry, and this is allowed
only to administrators, but it also depends from software to software.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), Windows MVP
(e-mail address removed)
http://ladava.com
 
Back
Top