none
Is there a way to Install a software when user logged in Win7 or Win XP as Non-Admin / Standard user privileges ? Can we edit the registry ?

    Question

  • Is there a way to Install a software when user logged in Win7 or Win XP as Non-Admin / Standard user privileges ? Can we edit the registry ?

    www.tnvbalaji.com

    Friday, November 22, 2013 10:14 AM

Answers

  • It's not possible as such.

    If the standard user is a part of a user group that has permissions of installing a software (modifying Program Files folder and editing registry entries). In such a case, other administrative operations will not be possible. But note that addition of a user to a user group can be done by an administrator only. And editing of registry can be assigned as a part of the group, but is not recommended as per security requirements.

    This privilege is not available for Guest user account, although it's a non-admin account, and this way it differs from standard user account.


    Balaji Kundalam

    Sunday, November 24, 2013 4:50 PM
  • Hi, 

    Based on my knowledge, it's impossible. 

    This can be explained that to distinguish the permissions of installing app and configuring system, we work out the different user group. 

    Thanks for your understanding. 


    Kate Li
    TechNet Community Support

    Wednesday, November 27, 2013 12:25 PM

All replies

  • 1. Without GPO restriction it is possible to install some applications. See the Jeremy Moskowitz presentation(s) on TechEd or read his book Group Policy.

    2. If the domain user is added to local administrators, it is possible for him/her to install applications.

    3. There is a possibility to install by GPO that is stimulated by user that is logging on.

    If you give more information on the target configuration, it is possible to give more information on the path to final configuration.

    Regards

    Milos

    Friday, November 22, 2013 3:39 PM
  • It's not possible as such.

    If the standard user is a part of a user group that has permissions of installing a software (modifying Program Files folder and editing registry entries). In such a case, other administrative operations will not be possible. But note that addition of a user to a user group can be done by an administrator only. And editing of registry can be assigned as a part of the group, but is not recommended as per security requirements.

    This privilege is not available for Guest user account, although it's a non-admin account, and this way it differs from standard user account.


    Balaji Kundalam

    Sunday, November 24, 2013 4:50 PM
  • Yes, possible using SCCM.

    Arnav Sharma | Facebook | Twitter Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Sunday, November 24, 2013 5:17 PM
  • Hi, 

    Based on my knowledge, it's impossible. 

    This can be explained that to distinguish the permissions of installing app and configuring system, we work out the different user group. 

    Thanks for your understanding. 


    Kate Li
    TechNet Community Support

    Wednesday, November 27, 2013 12:25 PM