Running a Program with Admin rights

[blemoine]

here is the problem. i have some users that only have "user" rights but one program that they must use requires admin rights. i don't want to make "domain users" apart of the local admin group because we don't want them to be able to install software. if i use "runas" then they would have to enter a username and password with admin rights to use the program which defeats the purpose. does anyone have an answer to this one? i would really appreciate the help. thanks

 

[dphantom]

many such apps only require local admin on install. Once it is installed, local admin can be removed. Alternatively, one could determine what process specifically require admin priviledges and only apply admin rights to those specific processes.

That can get complicated and time consuming.

 

[blemoine]

the program requires admin rights because when they first open the program it updates itself from the main server. the update basically reinstalls the software with the new version. how can i assign admin rights just to that program? just point me in a direction. thanks

 

[brunswickite]

Originally posted by: blemoine
the program requires admin rights because when they first open the program it updates itself from the main server. the update basically reinstalls the software with the new version. how can i assign admin rights just to that program? just point me in a direction. thanks

Ok Many things you can try. I think the easiest is to first give users, explicit rights to the folder in Program Files the application is trying to write to. Also, give full permissions to the hive in the registry.

A few questions I also have. What application is it?

Also, when it downloads updates from the server, is that a new version? Can you just install that first?

 

[LOFBenson]

Check out the tips on using runas and hiding your admin passwords here (may require free login) Should work fine as a separate program as well as a login script like they talk about.

 

[SolMiester]

You could get the users full permission in the registry for that program also.

 

[JRock]

Originally posted by: brunswickite

Originally posted by: blemoine
the program requires admin rights because when they first open the program it updates itself from the main server. the update basically reinstalls the software with the new version. how can i assign admin rights just to that program? just point me in a direction. thanks

Ok Many things you can try. I think the easiest is to first give users, explicit rights to the folder in Program Files the application is trying to write to. Also, give full permissions to the hive in the registry.

A few questions I also have. What application is it?

Also, when it downloads updates from the server, is that a new version? Can you just install that first?

:thumbsup:

We had a Loan Origination program that had similar problems. Everytime an update was done to the server each client machine needed to be updated and required admin rights to do so. Good advice you have here. I am also curious to what application this is...

 

[InlineFive]

The first step would be to give the current user rights to that programs directory and registry files. If that doesn't work then tryin using Run As.

 

[blemoine]

A few questions I also have. What application is it?

brunswickite: The program is called "jpams." it is a High School Database program (for grades, attendance, class schedules and things like that.) it runs on a linux server and the workstations have a java based client. it is written by this company out of shreveport, la. they send the update to the server every night. when users first open the program each day it is supposed to connect to the local server and update. it is only doing this if you logon with admin rights. now they can update it the hard way which is connect to the software's website and download it manually. the download takes about 20 minutes. thanks for your help. everyone has been very helpful

 

[Brazen]

Originally posted by: PorBleemo
The first step would be to give the current user rights to that programs directory and registry files. If that doesn't work then tryin using Run As.

:thumbsup: Yes, give the usr "modify" permissions to the program's folder under "Program Files."

The registry folder for the program under HKLM should have "full control" for users, and most likely that is all you will need.

 

[brunswickite]

Originally posted by: blemoine

A few questions I also have. What application is it?

brunswickite: The program is called "jpams." it is a High School Database program (for grades, attendance, class schedules and things like that.) it runs on a linux server and the workstations have a java based client. it is written by this company out of shreveport, la. they send the update to the server every night. when users first open the program each day it is supposed to connect to the local server and update. it is only doing this if you logon with admin rights. now they can update it the hard way which is connect to the software's website and download it manually. the download takes about 20 minutes. thanks for your help. everyone has been very helpful

a few more questions.

Is the program updated every day? or very often?

If a user goes to the software website and downloads it manually, does it install properly? or does it error out somewhere. (This is assuming that you gave the Local User, Permissions to the program's directory in "Program Files" and the hive for the program in the registry.

The last thing you can try is to use Filemon and Regmon to see what specific files/reg hives are getting "Access Denied" and give them approriate rights.

 

[blemoine]

Thanks guys. i used your suggestions and gave the users the correct permissions to the folder and they are updating now. thanks again to all who have helped me.