Using SCCM to grant local admin/remove local admin
Hi,
I am trying to use sccm to run a piece of software as the user and not the administrative account. (This is a program requirement -- running as the user that requires the program)
The issue I have run into is I am unable to run the software, because the users do not have local administrator access on their machines.
To workaround this I am trying to create a package to grant them local admin access, do the install, then remove the user from the local admin group with another push.
Is this possible with sccm if, so how do I do it?
I did see a post in scripting, but there was no posted solution.
Thanks,
I am trying to use sccm to run a piece of software as the user and not the administrative account. (This is a program requirement -- running as the user that requires the program)
The issue I have run into is I am unable to run the software, because the users do not have local administrator access on their machines.
To workaround this I am trying to create a package to grant them local admin access, do the install, then remove the user from the local admin group with another push.
Is this possible with sccm if, so how do I do it?
I did see a post in scripting, but there was no posted solution.
Thanks,
0 Comments
[ + ] Show comments
Answers (1)
Please log in to answer
Posted by:
anonymous_9363
14 years ago
Rather than granting administrative access, I think you may be thinking of having installs run with elevated privileges. You can do that via Group Policy or, as with most GP stuff, temporarily by setting the relevant registry settings on, then off again when the install completes:
' Set Install Elevated to allow installation.
"HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer","AlwaysInstallElevated", "REG_DWORD", 1)
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer","AlwaysInstallElevated", "REG_DWORD", 1)
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer","EnableUserControl", "REG_DWORD", 1)Set the REG_DWORD to 0 to turn the policy off.
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.
