Changes in the way Windows Vista and more so with Windows 7 were designed compared to earlier versions have led many organizations to stop letting their users be local administrators. Change to Enable Windows Installer 4. General Discussion Flash works on my admin account but not my other accounts. I've been working in broadcast media since 2008, and developing software and websites for just as long. The answer is probably not…with some caveats. This way, users are better able to troubleshoot and fix any problems on their own, in addition to performing desktop updates that your techs would otherwise have to do for them. They are generally capable of performing due diligence and practicing smart security.
Consider these alternative solutions: Require the clients to provide you their applications before the consultants head out so the applications can be installed ahead of time through your regular procedures. User puts their own username and password in presses enter and the software carrys on. Is there a way to allow standard users to install applications using local policy? Not a deal breaker, just a pricey route depending on your needs. We do not let our clients install software. It may be that the addons are not installed to the limited user accounts, but if that is the case, then they should be able to be installed freely by the limited user himself.
I'm pretty sure I know the answer, but the bosses are asking that my team and I try and come up with some sort of solution to this issue, without granting full-on local admin rights. I have checked ie settings and don't see anything different, but I must be missing something. In Favor of Admin Rights Outside of employee happiness and productivity, software and system updates also require administrative rights. This is all enabled via Group Policy and everything is defined as it should be. Users will not see a User Account Control window and do not need elevated permissions to install these updates, except in the case of updates that contain User Interface , End User License Agreement , or Windows Update setting changes.
We don't want to grant rights as you said the potential damage is exactly what we're afraid of. The impending damage is worse than you might first think. The admin account keeps people from downloading a bunch of stuff. Its a pain to setup but allows users to install their own software. I'm always having problems when they're trying to download even a safe program but they get a message prompting them for the admin password otherwise they'll have limited functionality of the program To my knowledge, this cannot be done. All programs should be able to be used freely.
I was hoping to find something like allowing installation of programs from a particular publisher or something like that. . General Discussion I'm the only person using my computer usually. Almost as if domain users have admin rights? These workers often need to research and install their own software tools and may not even know how they will use their system until a specific situation or problem arises. I can only see granting local admin rights This is not something you should do. You'll need to run it as an account with admin privileges.
You truly need to trust your users for this approach to work — and they need to be very savvy and educated in regards to information security and best practices. Or have any of you come up with some other creative way to accomplish this? I have the secret Administrator account turned on and password protected. Standard user can only do tasks that don't require administrator rights. And I agree with your observation. In the end it was decided that the boys would stay as standard users and the parents would be Administrators, having a final say of what was being done on the computer. It may be worth your while to restrict admin rights for the majority of your users, while creating a tier that has local admin rights for your developers or otherwise computer-savvy employees. I have two kids who like to print stuff.
Organizations that must comply to regulatory or compliance standards may also put that compliance at risk if they enable local administrative rights. Examples, Adobe Flash, Java, ect. See if this does the trick. Setting the system to install the update automatically and allowing the user to defer them at shut-down time may be an acceptable compromise - you don't know until you ask!. So corporate policy is no local admin rights for any users on laptops. The ideal way to implement this is to require these users to use their non-admin account 99% of the time, and give them a separate local admin credential that is only used when installing software.
Local Group Policy in Windows: 1. One frequent request is to allow non-administrators to install software on their machines. This is not only possible, it's common. Below is the link for the software and all of the programs that can be installed just so you have an idea what I'm talking about. The problem is that a lot of times, these laptops are sent to users in the field who consult for clients and install their own applications that they need to do the job a lot of them are software developers or database administrators, etc.