Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How do I stop admins from installing software (Can't set to standard)

17 Aug 2015   #1
IT Wizard

Windows 7 Professional
 
 
How do I stop admins from installing software (Can't set to standard)

Hi all,

I'm hoping one of your resident geniuses may be able to help me!

Background: I work on a support desk and one of our customers has decided to downgrade all of their end users from Admins to Standard users in Windows 7 to stop them installing non-work-related applications on their work laptops. The software of ours that they use requires administrator rights to function else it will instantly have a fatal error and crash. This is due to the very way it works (it is essential).

Problem:
1) We no-longer develop for this application and to fix it would require a complete rebuild of the software.
2) They COULD set the application to run as an administrator but it saves the admin password in "Credentials Manager", where the users can apparently view the password in plain text, so the customer is unwilling to do this (fair enough really!).

Any ideas? Our IT, their IT and our developers are all a little stumped. Any help would be massively appreciated Thanks a lot!


My System SpecsSystem Spec
.
17 Aug 2015   #2
Brink

64-bit Windows 10 Pro
 
 

Hello IT Wizard, and welcome to Seven Forums.

You might see if OPTION ONE in the tutorial below may work for this. It does the same thing as OPTION TWO that you mentioned in your post, but without the security hole for the password.

Elevated Program Shortcut - Create for Standard User
My System SpecsSystem Spec
17 Aug 2015   #3
UsernameIssues

W7 Pro SP1 64bit
 
 

It is hard to say how to fix the issue - since we don't know the cause of the crash if run as a standard user. A tool like Process Monitor might give some clues in that area.

Does your old app write info to a folder under Program Files or Program Files (x86)? If so, then carefully changing the security settings to allow the group named Users to write data only to your app's folder might solve the crash. It is important that you make such changes correctly* so as to preserve as much of the standard user security model as possible.

*I can detail what I deem "correct" after I know if the app writes data there.
My System SpecsSystem Spec
.

18 Aug 2015   #4
IT Wizard

Windows 7 Professional
 
 

Hello again!

Thanks so much for your replies, they're seriously appreciated! We've been so stuck on this!

Brink, that's a really nice guide and an awesome suggestion. Our entire office is on Windows 8 now which makes it impossible for me to test here so I've forwarded the details on to them so they can test it to see if it does the trick. Fingers crossed!
My System SpecsSystem Spec
18 Aug 2015   #5
Brink

64-bit Windows 10 Pro
 
 

I hope it will work for them. Please let us know how it went.
My System SpecsSystem Spec
Reply

 How do I stop admins from installing software (Can't set to standard)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Can I allow domain users to install software updates w/o being admins?
I work in and oversee the computer network of a small architecture office. We only have 6 or 7 users right now, and about 12-14 active machines throughout the office. All machines connect through our office domain to our server box running Windows Server 2003 x86. Most production machines are...
General Discussion
Install Software as Standard User
I have a dilemma, I have searched the threads but not found something that matches my exact problem. We are implementing Windows 7 and Bitlocker as encryption. While this works brilliantly, I am now worried that our offsite engineers if they are given Local admin rights, can disable bitlocker....
General Discussion
Stop standard users from Printing
Hi! I have two kids who like to print stuff. Can I disable their ability to print, or require an Administrator Password to Print? Thanks in advance!
General Discussion
Standard user able to install software?
I use a standard user account for my day to day computing. Today I installed the Google Chrome beta and it fully installed without ever asking for the elevation to administrator. I thought standard users could not install software. Any ideas what happened here? Thanks
Software
Account Operators, Domain Admins, Enterprise Admins
For some reason in Windows 7, my BitDefender anti virus software shuts down periodically and I have to restart it by going to services.msc in the search prompt and force restart of the program. Today I clicked on properties and it displayed some actions I could take after the program shuts down...
System Security
Installing apps - Admin or standard account?
Hi, I want to know if it makes a difference whether I install applications under the Admin or standard account. When I upgraded from XP to W7, I decided to setup an admin and a standard account. I know computers well but all my life, I always had one account but now want to be more secure. ...
Installation & Setup


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:49.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App