Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Restrict Administrator account to install only (Server 2008)

10 May 2012   #1
pilau

Windows 7 Ultimate 32bit
 
 
Restrict Administrator account to install only (Server 2008)

Hi, I need to provide a client a means to install software on the computer, but I don't want the client to be able to change any system settings. It is a Server 2008 system. I know This is a Win7 forum, but the systems are from the same generation.

Is there a way to accomplish this?
Also, sorry if this is the wrong forum, mods can fix. Thank you in advance!


My System SpecsSystem Spec
.

10 May 2012   #2
logicearth

Windows 8.1 Pro (x64)
 
 

Can you install administrator applications that require administrative power to be installed....No...unless you get the developer of those applications to change them. Even if you could, that would be a security risk. A non-administrator user could use the administrative-powered application to conduct administrative tasks. Not good.
My System SpecsSystem Spec
10 May 2012   #3
pilau

Windows 7 Ultimate 32bit
 
 

Thanks for the quick reply! However, I think you may have misunderstood me.

Allow me to elaborate:
The client logs on to the computer through remote desktop on a standard user account - not an administrator account. I have set up an additional administrator account ("admin") without the ability to log on through remote desktop i.e. - even if I give the client the admin password - he cannot log on to this account from RDP.

I want to limit the admin account to only be able to install software - and that's it.
My System SpecsSystem Spec
.


10 May 2012   #4
logicearth

Windows 8.1 Pro (x64)
 
 

Right...but its already setup like that. Only an administrator privileged user can run and install software that affects the system as a whole. A user that has no administrative power can only affect themselves, deleting their user created directories clears everything away. There is nothing to configure.
My System SpecsSystem Spec
10 May 2012   #5
pilau

Windows 7 Ultimate 32bit
 
 

I'm sorry mate, but you still don't understand

I set up another admin account. This account cannot log in via remote desktop. I want to give the client, who logs in via remote desktop, the admin password, so he can install programs. However, because I am giving him the password he can basically change system settings and so on - and I want to restrict that admin user from doing. I want it to only be to install programs and that's it.

Please help me achieve this. Thank you in advance.
My System SpecsSystem Spec
10 May 2012   #6
logicearth

Windows 8.1 Pro (x64)
 
 

.............Course I don't understand you keep leaving important information out!

You given the user an administrator account, with administrator power now you want to revoke their administrator power except the ability to install applications, correct? You might as well forget about all of that. You cannot lock down an administrator account that the user can not bypass. Its like installing the worlds best security system in your house...yet you leave the key to the front door and the secret security code on the front porch. See how effective that security system is now.

You cannot give a user administrative power and take it away except one item, it does not work like that. Their is no "allow installations for non-admin users" because the concept of installing software is just an abstraction of copying files into certain locations which may or may not need administrative power to write to those locations. Allowing non-admin users to write to those locations is not wise. Thus, it cannot be done. (In a secure fashion)
My System SpecsSystem Spec
10 May 2012   #7
pilau

Windows 7 Ultimate 32bit
 
 

Yes, I understand now. Thank you
My System SpecsSystem Spec
Reply

 Restrict Administrator account to install only (Server 2008)




Thread Tools





Similar help and support threads
Thread Forum
Enable user account at logoff/shutdown - server 2008 R2
Hi folks. I've got Server 2008 R2 laptop that I need to transfer files to. Frequently, when I reconnect the mapped drive on the source computer, it disables my account on the laptop. Sometimes I forget to check & re-enable it, causing me to get someone to re-enable my account. I created a...
General Discussion
Windows Server 2008 R2 - SP1 wont install - 0x800f0818
Hello out there! A few Days ago, i installed a "fresh" Windows 2008 R2 Server standard and waited a long time for all those updates out there. Now my little HP Microserver NL 40 is stucked with the SP1 Package! What i've already tried: Checkdisk - No Errors Check Windows Files - No Errors
Windows Updates & Activation
Do I install mobo drivers the same way for Windows Server 2008 R2...
as I do with Windows 7? or there is a special set of drivers for Server OS? I just installed Windows Server 2008 R2 SP1 for a client, I just want to be sure before I screw something up.
Drivers
Can I Install Virtual PC on Windows Server 2008?
I need to use Windows 7 for some reasons. Currently, I'm using Windows Server 2008 on my pc to do my works. So, I'm thinking to install Virtual PC on my Windows Server 2008 and then, install the Windows 7 into the Virtual PC. Is it possible?:o
Virtualization
Limited account, restrict apps, but has install rights
Dear Seven members, I am running Windows 7 Prof x64 and I want to add a limited user account. I will be leaving home for about 6 months and a friend will be using my computer in the meantime. this means I won't be able to access the computer in that time. I want to create an account for him,...
Customization
Server 2008 re-install software
I have a 2008 server and I'm trying to re-install Crystal reports software becuase of a missing dll. I can re-install without any problems, and when I go into the software it works fine, but when I log off and log back on, I have the same problems taht I had before re-installing. It's like the...
Software

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:18.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App