WinXPTalk.com

Michael · Guest

In the past I've always used local profiles, and set the user as the local
administrator so they could install programs and modify settings.

I recently started using Roaming Profiles, but I'm having the problem where
users cannot install programs on their local machines unless they log in as
administrator (remote site, I can not easily access). Is this just how it is,
or is there a way I can modify their permissions on the server so that they
have quasi-administrator rights on their local workstations. All of my
education in Active Directory is self-taught, so I'm not familiar enough with
the architecture to know the right place to modify settings.

A specific problem is using AutoCAD. Users want to customize their toolbars,
but can't because the menu files can't be edited while they are logged in.

Steven L Umbach · Guest

Profile types have nothing to do with installing software. Applications that
write to the system folder and/or program files folder need to be installed
by a local administrator or possibly power user. However if the application
is a .msi package you can use Group Policy Software Installation to assign
or publish the package so that it can be installed by or for even regular
users. Unfortunately too many applications are designed [poorly] so that the
user must be a local administrator to run or take full advantage of the
application. You could try contacting the publisher to see if there are any
folder or registry permissions/settings or other settings/updates that can
be modified so that a regular user can use that application. If the
application runs correctly when the user is a power user then permissions
can be modified so that it works for a regular user. You may also want to
post in an AutoCAD newsgroup. --- Steve

	WinXPTalk.com Forum Index -> Security	All times are GMT
Page 1 of 1