Announcement

Collapse
No announcement yet.

user can't install any application on his computer

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • user can't install any application on his computer

    Hi All

    I'v a domain on windows 2000 its name is : friends.com
    I'v just created OUs ,Users and Groups.
    When I joind a client to the domain and did logon by a user's user1 that it's member of domain user it can't install any application (software .... MS Office fro examble)
    the message appears the user haven't permission to install ...
    Is there any way to help user to install any application on his client
    I dont wanna to put the user in power user
    Is there any way with group policy to do taht.

    Yhank you a lot

  • #2
    Re: user can't install any application on his computer

    When working in a domain environment it is iportant to know what the security settings of each user and groups are. Regular users do not have rights to instsall most applications that require writing to the registry and in other places.

    If you need to give the user such permissions you will need to give them the appropriate rights, such as local administrators.

    There is a method to bypass these issues, and you might want to look into it. You will need to use the COMPATWS.INF security template.

    http://www.microsoft.com/resources/d...d_sec_umgs.asp
    Cheers,

    Daniel Petri
    Microsoft Most Valuable Professional - Active Directory Directory Services
    MCSA/E, MCTS, MCITP, MCT

    Comment


    • #3
      Re: user can't install any application on his computer

      I'd like to thank you on your reply
      Thankx a lot
      I'll try the second way and i'll tell you what's happined with me.
      thank you

      Comment


      • #4
        Re: user can't install any application on his computer

        Mr Daniel Petri,

        I hope you are doing well
        I've tried with template way but the user still can't install any application.
        I'v done the follwing :
        1- stare run - mmc
        2- add Security configuration and analysis
        3- right click on it and slecet open database and save "campatwsTEST"
        4- import the file campatws.inf
        5- analysis the new file campatwsTEST ...... and change what i need
        6- configuration ...
        7-restart the server
        8-I found these i'v changed them true
        9-but the user can't install any application yet
        Can you help me please
        Thank you a lot

        Comment


        • #5
          Re: user can't install any application on his computer

          it sounds like you dont have any group policies against the users installing software but windows itself is not letting them. if you want the use to be able to install software by themselves your gonna have to give them local admin or at least local power users.

          control panel, user accounts, add
          MCSE 2000\2003, A+
          00000001-00000011-00000011-00000111

          Comment


          • #6
            Re: user can't install any application on his computer

            dear soc12666!
            since there are many solution for one problem, first of all I think you should answer to some questions
            Why you would like users to be able to install softwares?(uses have knnown limitations in all of OS,else they would be powerusers or Admin)
            How many users you would like to be able to install softwares?
            which types of softwares you would like they could install?(Are these specific programs or any program)

            Your answers will lead to best reply for your thread

            Comment


            • #7
              Re: user can't install any application on his computer

              Hi All
              I'm working on windows server 2000 domain.
              I'v installed AD and created some OUs and users
              the users are members of Domain user by default
              there is no group for power user in AD
              I can use a Group policy to allow users to use some softwaers (.msi) for example MS office 2000 but somtimes there are another softwares that the users need them to install on their clients by themself.

              I need to allow users to install any softwaers to clients that joined to domain

              thank you a lot

              Comment


              • #8
                Re: user can't install any application on his computer

                and Users numbers you would like to empower thhem to install software?

                Comment


                • #9
                  Re: user can't install any application on his computer

                  Thank you
                  I need to allow all users on my domain to install any softwaers thet they want

                  Comment


                  • #10
                    Re: user can't install any application on his computer

                    I think the easiest thing would be to add users to either the local power users group or the Administrators group.

                    Comment


                    • #11
                      Re: user can't install any application on his computer

                      How can I do that dear,
                      I think no power user in Active Diretory and I do want to add users to be member of adminstrator
                      Thank you

                      Comment


                      • #12
                        Re: user can't install any application on his computer

                        Originally posted by soc12666
                        How can I do that dear,
                        I think no power user in Active Diretory and I do want to add users to be member of adminstrator
                        Thank you
                        cause power users is not a builtin group in windows server systems.
                        you could see them in your clients systems by local authenication.
                        the way 'wullieb1' or others introduce to you is for 1 or users.
                        use 'domain security policy'.you could define installaytion permissions there.

                        Comment


                        • #13
                          Re: user can't install any application on his computer

                          Originally posted by soc12666
                          How can I do that dear,
                          I think no power user in Active Diretory and I do want to add users to be member of adminstrator
                          Thank you

                          Right.

                          The power users group is LOCAL to the PC and not the domain. As you correctly point out there is NO Power users group on the domain.


                          Probably the easiest way to do it is to add the Authenticated Users group to the Administrators (as you have mentioned) group on the LOCAL machine. This will give users administrative rights on the LOCAL machine only.

                          This can all be done via the Restricted Groups in your GPO options.

                          Comment


                          • #14
                            Re: user can't install any application on his computer

                            Exactly wullieb1,

                            Comment


                            • #15
                              Re: user can't install any application on his computer

                              Thanks guys
                              for example
                              Domain : petri.com
                              OU: TEST
                              user: user1 (just member of domain user) I don't want to add it to administerator group Because you know !!

                              I joined the clinet to domain
                              restart the system ........

                              logon....
                              username : user1
                              password :******
                              Domain : petri

                              user wants to install visio for exmaple he can't because he hasn't permission to inastall software(s)
                              I know when I logon to local computer by any user must have the power user or administrator groups to do some or any thing


                              Thanks guys agine

                              Comment

                              Working...
                              X