Elevate admin rights for user to run programs

[killerboot]

good day all.

 

i ved just migrated one of our labs from win xp pro sp3 to win 7 enterprise x86. all pcs are in a domain. domain users (students) are set to users.

 

when i log in using a student account, some of the softwares need admin elevation. such as adobe reader and visual studio 2005 & 2010. is there a way to make the users to run this apps without UAC prompting for elevation? other than turning the UAC off?

 

ive done this sevenforums.com/tutorials/11841-run-administrator

in administrator account but when i log in using a user account, the apps still ask for admin password for elevation..

 

thanks

[srochford]

None of the programs you list should need admin rights so I think you need to try and find out what's going wrong that requires this.

 

Have you tried to lock down permissions on the c: drive? If so, I'm wondering if you've locked down something too much and that's causing the problem.

 

What I would do is use procmon (from here Sysinternals Process Utilities) and try to see what's trying to write/read and being denied.

[killerboot]

i havent done yet the lock down. no other security settings other than joining to our domain.

 

office, visio & project 2010 are all working fine. only adobe reader & vs 2005&2010 giving me these problem. i have been on this from last week...

[mrbios]

What are the student profiles? mandatory, roaming, local? etc

[killerboot]

all profiles are local.

[srochford]

How did you install Adobe Reader (for example)? Did you make any changes to the default user profile - if so, what? (I'm wondering if you've made a change such that users can't write to something in HKCU because it wasn't created by them)

[killerboot]

all the apps were installed via network share. adobe reader & vs 2005 are the same server and vs 2010 is from another server.

all of the apps installed are original, except for adobe reader of course.. lol.

 

no alteration was done on the apps or the os. the os is a clean installation, and cloned to others. havent done lock down yet. just some simple gpo editing:

 

1. standard wallpaper

2. force classic view

 

other than that, all are default.

[mbelld155]

Hope this helps...

 

Elevate User Permissions in Windows with Privilege Authority - ScriptLogic

 

Runas - Run As Administrator - FREE, Download Now!

[somabc]

You really do not want the users running applications as an administrator.

[killerboot]

@mbelld155 - thank you. will look into that. scriptlogic is kinda interesting. will test it.

 

@somabc - me too. but some function in vs need admin right to run. but to think again. before, with vs 2005 in win xp, those standard user accounts could run vs and do their programs without admin rights. it just simply weird to have this problem in win 7.

 

any other bright ideas? coz, im lacking the brain cells....

[killerboot]

yeeyy..

 

i found the solution! the problem started when i installed the apps. a pop-up tells that some portion needs admin:confused:. i then check the run as admin to all user box. i thought by doing that i will set the apps to run with admin rights by every user in the pc... but... what i have done is just make the apps keep asking for password to elevate for everyone who wants to run them...

 

for those who cares to kill their brain cells for this problem, i say thanks a million. next week i'll be going to 50292A- Implementing and Administering Windows 7 in the Enterprise. hope i can improve in win 7 more.

 

thanks again ya all..