The Office Resource Kit allows for configuration of Office apps for Group
Policy deployment without having to give users local admin rights, even at
first run.

Laura
----- Original Message -----
From: "Bejon Parsinia" <bejonsupertel.com>
To: <comprepsrvyahoo.com>; <focus-mssecurityfocus.com>
Sent: Monday, April 08, 2002 2:59 PM
Subject: RE: Group Policy denies access to some programs

> One thing that you may have to do is allow the users to have access to
their
> local machines as admins. Some programs, and in specific MS Office, need
> Admin privileges to execute the first time. The reason for this is that
> some of the components are initialized when the program is first run that
> may interact with the registry or may attempt to modify dll's or ini
files.
> The problem inherent in granting this sort of access is the users can
> install ANYTHING on their machine without you knowing about it. One thing
I
> did notice though, is that after granting the user access to their local
> machine as an admin is that once they access the program for the first
time,
> I was able to remove the local admin rights and everything was fine. You
> may want to give this a try and see if it will work.
>
> Good luck,
>
> Bejon
>
> -----Original Message-----
> From: comprepsrvyahoo.com [mailto:comprepsrvyahoo.com]
> Sent: Monday, April 08, 2002 8:15 AM
> To: focus-mssecurityfocus.com
> Subject: Group Policy denies access to some programs
>
>
>
>
> I have a w2000 server running AD which authenticates w2000 Prof. clients.
> I have Group Policy set up and my users are part of the Domain Users
> group. When these users try to access certain programs they get errors
or
> access denied errors. I used RUN AS to install and tried installing
under
> my admin account, placing a shortcut in the ALL USERS desktop folder.
When
> I run the programs under Admin, they work fine. So, how can I free
> certainm programs to run for the users that need them? thanks dp
>
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]