Mac, Grant Access To Program For All Users

1. How To Install Program For All Users
2. Change Default Program For All Users

Administrator access allows the admin user abilities to change any and all system settings, install software, install updates, change passwords, create new accounts, delete existing user accounts, erase data, encrypt a drive, and much more. Do not give an untrusted user an administrator level account or admin access account on any Mac.

How To Install Program For All Users

I have a program installed on my W2k8 R2 server which needs admin rights to start.

I have 5 users using remote desktop to remote into the server to use that program. I don't want to give those users admin rights, but I do want them to be able to run the program properly.

Is this possible?

5 Answers

Your best bet is to figure out which registry keys and directory locations that the program needs access to, and give your users access to just those areas.

Change Default Program For All Users

You can use a tool, like Process Monitor from Sysinternals for that. Simply log in as the user, start Process Monitor, and run the program and make note of the areas denying access.

Best Video Software for the Mac How To Run MacOS High Sierra or Another OS on Your Mac Best Graphic Design Software the Mac Stay Safe with Best Free Password Managers for. Blueprint combines a myriad of organizational capabilities into a single app. Blueprint provides complete integration of project management, contact management. Blueprint program for mac. 10 rows  The Best Home and Interior Design Software for Mac of 2018 We have been reviewing.

I would probably use a Security Group in AD, and then give that Security Group access to those system locations. All you would have to do then is add users to that Security Group and they will be able to use that program on that system with their own credentials.

Definitely use Cypher's suggestion. I've solved many pesky application issues by granting a user modify rights to specific install directories via security groups (and if needed reg keys). Unfortunately this assumes a half way competent programmer wrote the app and there aren't one or two files in c:windows or c:windowssystem32 that needs the same access.

Thanks for the answers, this is how I ended up solving it:

1. Create a Scheduled Task in the task scheduler. The scheduled task launches the application. Set the task to run at highest privilege level.
2. Create a shortcut on the desktop of all the users needing to run the application. The shortcut ended up looking like this: C:WindowsSystem32schtasks.exe /run /tn 'Name of task'

The only downside of this is that i need to create a separate task for every user, but I think it works just fine. A program like photoshop for mac.

Thanks everyone.

The only downside of this is that i need to create a separate task for every user, but I think it works just fine.

Why not create an 'applicative user' - used only for the task and that only you know the PW for.

This way you dont need to create a separate task per user and at the same time grant this user admin rights to the app.

5 Answers

Your best bet is to figure out which registry keys and directory locations that the program needs access to, and give your users access to just those areas.

Change Default Program For All Users

You can use a tool, like Process Monitor from Sysinternals for that. Simply log in as the user, start Process Monitor, and run the program and make note of the areas denying access.

Best Video Software for the Mac How To Run MacOS High Sierra or Another OS on Your Mac Best Graphic Design Software the Mac Stay Safe with Best Free Password Managers for. Blueprint combines a myriad of organizational capabilities into a single app. Blueprint provides complete integration of project management, contact management. Blueprint program for mac. 10 rows  The Best Home and Interior Design Software for Mac of 2018 We have been reviewing.

I would probably use a Security Group in AD, and then give that Security Group access to those system locations. All you would have to do then is add users to that Security Group and they will be able to use that program on that system with their own credentials.

Definitely use Cypher's suggestion. I've solved many pesky application issues by granting a user modify rights to specific install directories via security groups (and if needed reg keys). Unfortunately this assumes a half way competent programmer wrote the app and there aren't one or two files in c:windows or c:windowssystem32 that needs the same access.

Thanks for the answers, this is how I ended up solving it:

1. Create a Scheduled Task in the task scheduler. The scheduled task launches the application. Set the task to run at highest privilege level.
2. Create a shortcut on the desktop of all the users needing to run the application. The shortcut ended up looking like this: C:WindowsSystem32schtasks.exe /run /tn 'Name of task'

The only downside of this is that i need to create a separate task for every user, but I think it works just fine. A program like photoshop for mac.

Thanks everyone.

The only downside of this is that i need to create a separate task for every user, but I think it works just fine.

Why not create an 'applicative user' - used only for the task and that only you know the PW for.

This way you dont need to create a separate task per user and at the same time grant this user admin rights to the app.

Windows doesn't have the 'setuid' concept from UNIX. There's really only two ways to get to where you're after:

The first option is to do a 'run as' type scenario, where the logged-in user needs to have the appropriate password for the elevated user. The other is to write a 'helper' service that runs with administrator privileges (as services generally do) which will then grant elevated privileges to the user for that one process.

ActCAD uses most latest Technologies from IntelliCAD, ACIS and Tiegha to delivery reliable and high speed performance. Best drawing program for mac. There are many add-on tools like PDF to DXF converter, Image to DXF Converter, Over 5000 Standard Block Libraries. ActCAD is a true DWG & DXF CAD Software with complete 2D & 3D features to handle any Complex Project Easily. Self-license Transfer & Global Validity of Licenses. As the interface and commands are very familiar, it is EASY to use ActCAD without any difficulty.

Cleaning service software is a one-stop platform on your computer that streamlines all of the processes involved in running a maid service business. Common Features of Maid Service Software The features of maid service software will vary across platforms, but these are some of the common functions you will find (as well as other ): Schedule & route optimization Systems that use map-based employee scheduling streamline the business by enabling you to assign the right person in the right area to the right job—reducing employee travel time and transportation costs. Good cleaning program for mac.

Kindle for PC works much like the handheld device, with a basic but quite user-friendly interface, simple controls, and PC-specific features, such as an outlined graphic that pops up with helpful instructions for using the mouse to do what you do with your fingers on the handheld device. Its Whispersync feature automatically syncs your last page read, bookmarks, notes, and settings between a wide range of compatible devices. Clicking Archived Items accesses your saved titles. We clicked Shop in the Kindle Store to add some titles; you can buy e-books, but there are literally millions of free titles available to download through Amazon.com directly to your Kindle or, as we discovered, to Kindle for PC, from sites like the Open Library, Internet Archive, and Gutenberg Project. Kindle program for mac. Installing and setting up Kindle for PC is a snap if you already own a Kindle or have an Amazon.com account: just enter your ID and password, and Kindle for PC opens with your account in place.

I'm a bit fuzzy on the details of this second option, but I've seen it done before at a company where I used to work.

Not the answer you're looking for? Browse other questions tagged windows-server-2008active-directory or ask your own question.