standard users
We are in the testing phases of Windows 7 and will start to roll it out sometime this year. Currently, we have all of all end users as local admins on Windows XP. We would really like to get away from that and have everybody as standard users in Windows 7. The problem is that a lot of our end users work remotely and will need rights to install programs/software when they are out in the field at clients. I have been searching for awhile to a possible (impossible task) solution. I have tried playing with GPO, different rights/permissions...but to no avail. I am thinking that having standard users with install rights is impossible. Any ideas or solutions???Thanks all
March 1st, 2010 11:09pm

Nick Burns,We have the same problem in our organisation and we use BeyondTrust privilige Manager.http://pm.beyondtrust.com/products/PrivilegeManager.aspxThis tools does the following:BeyondTrust Privilege Manager enables organizations to remove administrator rights and allow end-users to run all required Windows applications, processes and ActiveX controls. By eliminating the need to grant administrator rights to end-users, IT departments can create a more secure, compliant and standard environment. Kind RegardsDFTIM me - TWiTTer: @DFTER
Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2010 11:42am

Thanks for the suggestion, DFT. I'll check it out. Any other ideas? A MS solution and not a third party app/program?
March 3rd, 2010 12:13am

Hi, Based on my research, I would like to answer you that the Standard user cannot install software in Microsoft side. The Standard user is a limited account which only has permission to access the application. To install any software, you should add them to Administrator group. Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
March 4th, 2010 5:41am

Nick, I agree with Novak that there is no Microsoft out of the box solution for your problem.And you need to go to 3rd party products to achive your goal.An other "Work around" is virtualisation you might want to offer your mobile workers a Virtual PC (MED-V).Where the user still has admin rights but you can completly lock those machines down.No network connection to the virtual pc etc ...A lot of success with your challange :)Kind RegardsDFTIM me - TWiTTer: @DFTER
March 4th, 2010 1:54pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics