Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 Enterprise - Allow standard user to install approved apps

08 Jan 2012   #1
Squelchy

Windows 7 Enterprise x64
 
 
Windows 7 Enterprise - Allow standard user to install approved apps

Hi,

I have over 120 clients running Windows 7 Enterprise in a Windows Server 2008 R2 domain. I am currently doing some testing around AppLocker, and generally locking down the user environment. I will soon be setting up some new Windows 7 clients with the users added as the Standard User type.

When a standard user attempts to install an application, the UAC prompt is displayed, which requests administrative credentials. Is there a way that I can approve/publish specific applications that the standard users can install themselves? If so, is there a way that the users can install updates for these approved applications themselves?

Any help would be much appreciated. Many thanks.


My System SpecsSystem Spec
.

08 Jan 2012   #2
cluberti

Windows 8.1 x64
 
 

You could, but that would require additional software. In a Windows world, this is generally accomplished by using System Center Configuration Manager (SCCM) 2007 or other competing products (SCCM is the most featureful and integrated with the other MS products, of course, and is my personal preference for lifecycle management). There are products that can be installed on Windows that provide "silent elevation" of certain programs, but those are generally not advised as they open up that user session to security risks (admin code now running in a user session with the same user token - not a good idea).
My System SpecsSystem Spec
01 Feb 2012   #3
Squelchy

Windows 7 Enterprise x64
 
 

Thank you for your reply. A few other people have confirmed that it is not possible to configure a user as a Standard User in Windows 7 and provide them with the privileges to elevate certain programs. I have tested Script Logic's Privilege Authority, and it has met the requirements mentioned in my original post.
My System SpecsSystem Spec
.


01 Feb 2012   #4
cluberti

Windows 8.1 x64
 
 

Be aware that programs that provide silent elevation mean the application is no longer interacting with the secure desktop, and removing one of the security mechanisms the OS has put in place to provide "regular users" security - using auto-elevation software sort of defeats the purpose of running as a standard user, and puts a nice bit elevatable security hole (silently, no less) that could potentially be exploited without any real user notification or interaction. While those sorts of things are good in theory, they would most certainly (at least from a security perspective) not be recommended in practice. You might as well make your users administrators at that point, because that's what doing such a thing amounts to.
My System SpecsSystem Spec
Reply

 Windows 7 Enterprise - Allow standard user to install approved apps




Thread Tools





Similar help and support threads
Thread Forum
Error when trying to log onto basic user account Windows 7 Enterprise.
Hello. I have access to log onto the Administrator account on my computer, but I changed some settings in the Group Policy Object Editor for the sake of experimentiaton and knowledge gain. I unwittingly prevented myself from being able to access the basic user account. Even though I have access to...
General Discussion
Win 7 enterprise install over win 7 home premium without losing apps
I have a new notebook with Win 7 home premium 64bit. + office 2010 professional. It has taken me almost 2 weeks to get all the info from the old notebook into the new one. Now I have a legal Enterprise Win 7 64 bit. disc from work and I want to install the Enterprise on the notebook and still...
Installation & Setup
Install Software as Standard User
I have a dilemma, I have searched the threads but not found something that matches my exact problem. We are implementing Windows 7 and Bitlocker as encryption. While this works brilliantly, I am now worried that our offsite engineers if they are given Local admin rights, can disable bitlocker....
General Discussion
How to allow Standard user to install softwares.
I have a set of of users who should be able to install softwares as a standard user. Is is possible, if yes then how.
General Discussion
On a new install, When do I branch off to Standard User?
Hello all, and thanks in advance for any help you can provide. Seems like a simple enough question, but not one I'm easily finding an answer to - either here or in Google. If I'm the 4,376,124th user to ask this question, then please be done with me and point me at the right link. I'd appreciate...
Installation & Setup
Standard user able to install software?
I use a standard user account for my day to day computing. Today I installed the Google Chrome beta and it fully installed without ever asking for the elevation to administrator. I thought standard users could not install software. Any ideas what happened here? Thanks
Software

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:08.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App