Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: Restrict Administrator account to install only (Server 2008)

10 May 2012   #1

Windows 7 Ultimate 32bit
 
 
Restrict Administrator account to install only (Server 2008)

Hi, I need to provide a client a means to install software on the computer, but I don't want the client to be able to change any system settings. It is a Server 2008 system. I know This is a Windows 7 forum, but the systems are from the same generation.

Is there a way to accomplish this?
Also, sorry if this is the wrong forum, mods can fix. Thank you in advance!

My System SpecsSystem Spec
.

10 May 2012   #2

Windows 7 x64 (SP1)
 
 

Can you install administrator applications that require administrative power to be installed....No...unless you get the developer of those applications to change them. Even if you could, that would be a security risk. A non-administrator user could use the administrative-powered application to conduct administrative tasks. Not good.
My System SpecsSystem Spec
10 May 2012   #3

Windows 7 Ultimate 32bit
 
 

Thanks for the quick reply! However, I think you may have misunderstood me.

Allow me to elaborate:
The client logs on to the computer through remote desktop on a standard user account - not an administrator account. I have set up an additional administrator account ("admin") without the ability to log on through remote desktop i.e. - even if I give the client the admin password - he cannot log on to this account from RDP.

I want to limit the admin account to only be able to install software - and that's it.
My System SpecsSystem Spec
.


10 May 2012   #4

Windows 7 x64 (SP1)
 
 

Right...but its already setup like that. Only an administrator privileged user can run and install software that affects the system as a whole. A user that has no administrative power can only affect themselves, deleting their user created directories clears everything away. There is nothing to configure.
My System SpecsSystem Spec
10 May 2012   #5

Windows 7 Ultimate 32bit
 
 

I'm sorry mate, but you still don't understand

I set up another admin account. This account cannot log in via remote desktop. I want to give the client, who logs in via remote desktop, the admin password, so he can install programs. However, because I am giving him the password he can basically change system settings and so on - and I want to restrict that admin user from doing. I want it to only be to install programs and that's it.

Please help me achieve this. Thank you in advance.
My System SpecsSystem Spec
10 May 2012   #6

Windows 7 x64 (SP1)
 
 

.............Course I don't understand you keep leaving important information out!

You given the user an administrator account, with administrator power now you want to revoke their administrator power except the ability to install applications, correct? You might as well forget about all of that. You cannot lock down an administrator account that the user can not bypass. Its like installing the worlds best security system in your house...yet you leave the key to the front door and the secret security code on the front porch. See how effective that security system is now.

You cannot give a user administrative power and take it away except one item, it does not work like that. Their is no "allow installations for non-admin users" because the concept of installing software is just an abstraction of copying files into certain locations which may or may not need administrative power to write to those locations. Allowing non-admin users to write to those locations is not wise. Thus, it cannot be done. (In a secure fashion)
My System SpecsSystem Spec
10 May 2012   #7

Windows 7 Ultimate 32bit
 
 

Yes, I understand now. Thank you
My System SpecsSystem Spec
Reply

 Restrict Administrator account to install only (Server 2008)





Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 02:56 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33