Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 Pro STANDALONE: allow user group to install application

02 Dec 2016   #1
mdfx

Windows 7 32/64 bit
 
 
Windows 7 Pro STANDALONE: allow user group to install application

Hi,

i need to do the following on a STANDALONE (no domain) W7Pro machine:

- create admin user --> easy
- create standard user group --> easy
- create a sort of "tech" user group: the users belonging to this group need to install applications without being prompted for admin password.

I've been told that this is possible with GPO, but so far I was not able to identify a local policy or o group of local policies that do the trick.

Can you help me, please ?


My System SpecsSystem Spec
.
04 Dec 2016   #2
cyanna

windows 7 ultimate x64
 
 

Create the "tech" accoutns and add them to the "power user" group. They will still need to provide a user name but it can be their own rather than the administrator one.
This being said all it takes is a user who knows how to use a computer to work around all of this, not to mention that a lot of software doesn't need the classical installation methods. For example Chrome offers a "non admin" install if it notices UAC is asking for a password, portable apps are rife and what I use at work so I can have a command prompt, shadow explorer and other goodies otherwise disabled by GPO...
My System SpecsSystem Spec
05 Dec 2016   #3
mdfx

Windows 7 32/64 bit
 
 

Thanks cyanna,

power user group is not working for us. We tested and many setups have problems (e.g. cannot access to registry) and abort the installation.

We really need full install privileges for the "Tech" group.
PCs will be positioned in a place where non technical people (standard users) will use few applications.
New applications shall be installed by "tech group" users, but they cannot be administrators due to company policy (even if PCs are not in the domain).

Any other idea ?
My System SpecsSystem Spec
.

05 Dec 2016   #4
cyanna

windows 7 ultimate x64
 
 

If you want a group of users to have full access to the registry and services that is by definition an administrator. (A GPO would essentially give users local admin rights)
My System SpecsSystem Spec
05 Dec 2016   #5
mdfx

Windows 7 32/64 bit
 
 

What about starting from an admin user type and then removing the capability to add/remove/edit user and groups.

Can this be done via GPO ?
My System SpecsSystem Spec
05 Dec 2016   #6
cyanna

windows 7 ultimate x64
 
 

Not really, but you can prevent acces to the control panel for a particular user, including an admin, via editing the registry. You will need to be logged into their accoutn to do that. Because they are admin they can reverse the edit, but I believe you don't think your users will have that kind of knowledge? (a dangerous assumption IMHO).
You can do the same thing to hide the console from them (cmd.exe), with the same caveats.
My System SpecsSystem Spec
Reply

 Windows 7 Pro STANDALONE: allow user group to install application




Thread Tools




Similar help and support threads
Thread Forum
Unable to upgrade IE8 to newer version- Standalone or online install
Ok, I will try and give the low down on whats going on without being too windy. Last Oct, I had a hard drive take a crap on me, long story short, I have a somewhat fresh install of my OS Windows 7 pro. After I finished the installation and the updating of the OS, I moved on to installing all of...
Browsers & Mail
Group Policy - Apply to a Specific User or Group
How to Apply Local Group Policies to Specific User or Group in Windows Windows has three layers of local GPOs: Local Group Policy Local Group Policy is the only local GPO that allows both computer configuration and user configuration settings to be applied to all users of the computer....
Tutorials
restrict user to use Application,USB,CDROM on standalone workstation
hello everyone in my organization we dont have domain we have workgoup and its on windows 7 they have asked me to restrict users to open certain application and disable USB and cd rom i tried to do it with gpedit.msc by following these steps gpedit.msc >computer configuration >security...
General Discussion
Adm can't open window application after applying the group policy
Hi, I have two users in my window 7 - userA (admin account) - userB (general user) I tried to limit the userB to open specific window application (I.e. win media player) by using userA to apply the follow setting: How do I allow Windows 7 users to run only specific applications?...
General Discussion
Can't install updates using windows update or standalone update
I haven't been able to install any updates since jan 11 of this year. I have been on the road for a few weeks and I tried to figure out the problem once I got back. When a update is being installed it will stall we will say at 95%. I have looked in the log files and this is what I find. From...
Windows Updates & Activation


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:06.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App