Software permissions

Hello

I had a number of users who wished to use some new software at their company, around 20 users that is on their laptops.

Naturally, as an admin I installed the software onto their laptops and it worked fine using my account when logging into the network. The software is installed locally.

However, when I logged in with their domain usernames and passwords 'access denied' errors popped up when trying to use the software. I have come across this many times before with certain software.

Anyway, when I changed their rights to 'Domain Admins' to test this, the software worked fine with their logins. When I changed their rights back to 'Domain User' it would not work for.

Does anyone know of a quick solution to this without giving them Administrative rights / Domain Admin rights to use the software?

Thank you,
Jeff

 

The quick (and dirty) way to do it is to:

• Log onto the PC as domain admin
• Go into Computer Management (in Administrative Tools or right click My Computer and select Manage).
• Double click on Groups in "Local Users and Groups "
• Double click on Administrators
• Add the users domain account to the Administrators group

It means the users get admin access to the PC, but not the network. It does open up a can of worms at the PC side, especially if you wanted to lock down their desktop, but is the simplest solution. The alternative is contacting the software manufacturer and asking them for a way to allow non-admin to their software.

(In my opinion, this sort of problem is indicative of poor software design/development - but there's a lot of it out there. It's common to have to make this compromise.)

 

Thanks Reggie.

Yeah, I gathered this was the case. I just wanted to confirm it wasn't me not being sure.

You are certainly right when you say it is poor software design.

So I gather as you say, and as I expected, that I would have to go to each PC to add the domain users account to the adminstrators group?

Many thanks,
Jeff

 

Don't forget this option. It is always worth a try. You may be able to limit the part of the registry or file system that needs general access.

 

Thanks, it's worth a try.

Jeff