No announcement yet.

non admin users install certain programs?

  • Filter
  • Time
  • Show
Clear All
new posts

  • non admin users install certain programs?

    Hi Guys

    we are going to try and roll out win7 and remove administrative access to the normal users

    but we want to let some users install say skype or their own personal 3G dongle

    is there a list or something we can use in GPO to allow this?

    thanks guys

  • #2
    Re: non admin users install certain programs?

    You could look at App Locker
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    IT Trainer / Consultant
    Ossian Ltd

    ** Remember to give credit where credit is due and leave reputation points where appropriate **


    • #3
      Re: non admin users install certain programs?

      You can publish certain apps in AD so that users are allowed to install them. I think it's under the software assignment policy, but you set the app to "Published" rather than "Assigned" or something like that. The published apps appear in the Programs Control Panel Applet IIRC.
      BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
      Cruachan's Blog


      • #4
        Re: non admin users install certain programs?

        Cruachan's suggestion is completely correct, using Group Policy, applications can be published so that users may install them using Programs or Add/Remove Programs. However, for your specific situation, AppLocker would appear to be a better fit. Its policies can control what applications are run on a system and what are not permitted, and unlike Group Policy published applications, it is unaffected by updates to that application. For example, you can simply assign a policy which permits Skype to be installed and run, rather than having to publish a specific version and update that policy as new versions are released.