Allow install of one application only

[FN-GM]

Hi there,

 

On staff laptops they are not local admins. We need it so they can install a little .exe application. We have not blocked the running of .exe in group policy so this is not a problem. How could i let staff so they can install this one application but not any others?

 

Thanks

 

Z

[rocknrollstar]

Can you not install it via GPO? Or are the staff laptops not on the domain?

[FN-GM]

Can you not install it via GPO? Or are the staff laptops not on the domain?

 

 

They are on the domain but most live at home and access the schools network via terminal server. The way it is setup they will hardly ever be directly connected to the system during start-up.

[k-strider]

i've done one off app installs using GPO with a special user, ie psinstall (for photoshop) the GPO sets the shell to be a cmd script the script calls the installer you then simply need to do stuff like disable all bar log off on the security screen. also set a flurry of GPO settings that make sure that no other shell can be run cant logon disconnected etc. just make sure the user ends up with local admin rights.

 

I've also used this method for activating software that requires admin rights... except it would run the software as the shell..

[k-strider]

do'h think your last post arrived when i was posting might not be such a good idea in your case... hum... /me thinks a bit more

[FN-GM]

ah, thanks anywy

[SYNACK]

AutoIT with RunAs:

 

Using RUNAS to Install an Upgrade - Indigo Rose Software Forums

[rocknrollstar]

What about using software like Encrypted RunAs Wingnut Software ? You could point users to a batch file which can be run with administrator rights, but the password is encrypted.

[Brpilot99]

I use this : CPAU

 

Works a treat ...