Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 Enterprise - Allow standard user to install approved apps


08 Jan 2012   #1

Windows 7 Enterprise x64
 
 
Windows 7 Enterprise - Allow standard user to install approved apps

Hi,

I have over 120 clients running Windows 7 Enterprise in a Windows Server 2008 R2 domain. I am currently doing some testing around AppLocker, and generally locking down the user environment. I will soon be setting up some new Windows 7 clients with the users added as the Standard User type.

When a standard user attempts to install an application, the UAC prompt is displayed, which requests administrative credentials. Is there a way that I can approve/publish specific applications that the standard users can install themselves? If so, is there a way that the users can install updates for these approved applications themselves?

Any help would be much appreciated. Many thanks.

My System SpecsSystem Spec
.

08 Jan 2012   #2

Windows Server 2008 R2
 
 

You could, but that would require additional software. In a Windows world, this is generally accomplished by using System Center Configuration Manager (SCCM) 2007 or other competing products (SCCM is the most featureful and integrated with the other MS products, of course, and is my personal preference for lifecycle management). There are products that can be installed on Windows that provide "silent elevation" of certain programs, but those are generally not advised as they open up that user session to security risks (admin code now running in a user session with the same user token - not a good idea).
My System SpecsSystem Spec
01 Feb 2012   #3

Windows 7 Enterprise x64
 
 

Thank you for your reply. A few other people have confirmed that it is not possible to configure a user as a Standard User in Windows 7 and provide them with the privileges to elevate certain programs. I have tested Script Logic's Privilege Authority, and it has met the requirements mentioned in my original post.
My System SpecsSystem Spec
.


01 Feb 2012   #4

Windows Server 2008 R2
 
 

Be aware that programs that provide silent elevation mean the application is no longer interacting with the secure desktop, and removing one of the security mechanisms the OS has put in place to provide "regular users" security - using auto-elevation software sort of defeats the purpose of running as a standard user, and puts a nice bit elevatable security hole (silently, no less) that could potentially be exploited without any real user notification or interaction. While those sorts of things are good in theory, they would most certainly (at least from a security perspective) not be recommended in practice. You might as well make your users administrators at that point, because that's what doing such a thing amounts to.
My System SpecsSystem Spec
Reply

 Windows 7 Enterprise - Allow standard user to install approved apps




Thread Tools



Similar help and support threads for2: Windows 7 Enterprise - Allow standard user to install approved apps
Thread Forum
Win 7 enterprise install over win 7 home premium without losing apps Installation & Setup
Install Software as Standard User General Discussion
How to allow Standard user to install softwares. General Discussion
On a new install, When do I branch off to Standard User? Installation & Setup
Standard user able to install software? Software
Standard user vs. Administrator in Windows 7 General Discussion
Installing apps - Admin or standard account? Installation & Setup

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:51 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33