Domain user software run permissions settings

In order to better manage and control client permissions, only the end user Domain Users group permissions. However, some software that requires local administrator permissions cannot be installed and run.

Solution:
1, all the software is installed in the fixed Program Files directory, and through the Group Policy to give programs files directory domain Users group Full Control permissions
2. Give registry Hklm_software the Domain Users group Full Control permissions through Group Policy
3. Give the Domain Users group system32 directory Full Control permissions through Group Policy

Through the above 3 local changes, 90% of the software can be run normally.

For some special software, we use Filemon and Regmon to monitor, find the required file or registry value, to properly release permissions. But the above operation process is quite cumbersome, ask experts, whether there is a better way to solve the Domain Users group user use software problems? Thank you so much!

Answer: According to your description, my understanding of this problem is that you want to know how to empower the Domain Users group in a simple way so that it can run the software.

Because of the permissions problems of the Domain Users group, we must empower them to run the software. At the same time, the software must be based on the use of rights to make appropriate changes. According to my experience, what you have done is the Microsoft recommended method, there is no other simpler way to achieve your goal.

Joining the Domain Users group to the local Power Users group works for most software. This does not have to be defined in Group Policy. However, because the Power Users group has relatively large permissions, it may not be what you want. But as I said, there is no other easy way.

Modifying the registry and the Software installation path may be cumbersome, and the recommended method is to do so through distribution, and if it still does not work, it can be done by roaming the configuration file.

This article is from the "H Ruthless" blog, please be sure to keep this source http://lyz2014.blog.51cto.com/1080117/1686728

Domain user software run permissions settings