Wednesday, February 8, 2012

How to avoid giving admin rights to a user based on app permissions

Many times app vendors will tell you that their software only runs if you give admin rights to your users. In most cases, you can give the users full control permission only on the app folder and this will take care of the problem.

This way your users will not have admin rights, but they will be able to read and write to the directory of a given app.

To do this simply locate the folders associated with the program on your hard drive
Then right click and go to properties
Select the security tab
Locate the users group and edit it for full control at the parent folder
Make sure that you replace permission to all child folders within the parent folder

If you do not want all users to have this access for that particular app, then specify the user with full access instead of using the "users" group that is defined by windows.

That's it

No comments:

Post a Comment