/build/static/layout/Breadcrumb_cap_w.png

Software Deployment Question


Giving standard user administrator rights on one application

06/12/2017 869 views
Guys,

I'm a trainee Windows Deployment on a high school with about 500 clients (Windows 10) and still learning. We manage everything with SCCM 2016. I'm struggling with the following problem. A client asked us to install an application named "Avolites Titan PC". Offcourse this is no problem, but our student are standard users without admin rights. Here it comes, the application needs administrator rights to start. What's the best way to realise this? Offcourse i Googled it and the solution to make a shortcut to the program and run it as admin seems a bit of a hassle, especially since the application is build up in multiple executables. The execute wants to write some registery keys to the register. Giving the user writing rights on c:\program files(x86)\Avolites doesn't does the trick neither.

Thanks so much guys.
0 Comments   [ + ] Show comments

Comments


All Answers

1
I think it's highly unlikely that the app needs admin rights to run. Rather, as you allude, it needs those rights in order to write data to the registry. So, why not simply add that data as part of your deployment? Additionally, you may need to change the permissions on the relevant registry key but that's simple enough using SetACL (or similar).

Use ProcMon to determine exactly what the app is trying todo, then open up permissions accordingly.
Answered 06/12/2017 by: VBScab
Red Belt

1
Thanks, in the meantime i had contact with the support desk of the software supplier. They said the following:

"

Running without Administrator privileges is not supported and there is apossibility that it could make some functions not work or the software tobecome unstable. One option could be use an application such as RunAsRob to allow the application to run elevated from a standarduser account.

 

If you do wish to try and run without elevation I would suggest that thefollowing two registry keys are made writable:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Avolites\Desk\FactorySettings

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Avolites\Titan

 

It is likely that some network functions will notwork, in particular setting IP addresses will not be possible and may not failgracefully.

 

This may not be everything and running in this way has not been tested."


I tried this, gave write permissions to the two registry keys but still UAC is asking for admin credentials.

Answered 06/12/2017 by: El Pollo Diablo
White Belt

1
Gotta love a vendor whose mindset is still in 1985...

What they're saying here is "We're too bone idle to actually bring our software up-to-date, as mug...sorry, clients still buy it anyhow." Imbeciles.

Anyway, as I said "Use ProcMon to determine exactly what the app is trying to do, then open up permissions accordingly."
Answered 06/12/2017 by: VBScab
Red Belt

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ