Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've got an application (guiformat) which needs to run on clients in a network. However, it seems to require Administrator privileges to run. Clients run either Windows XP or Windows 7, and users log in to their systems as "Standard Users".

Now, I've tried experimenting with Software Restriction Policies. However, this requires me to deny all applications by default and then specify which one that can be run. I rather just want the security checks to be bypassed for this one application (in other words, just have it to be whitelisted).

Any ideas as to how I can achieve that will be higly appreciated!

share|improve this question
add comment

2 Answers

Why not just run it in some form of virtual machine? this would isolate the main OS from this application and hopefully provide more stability for your application as well as bypassing this security problem and make rollout easier too perhaps. Something like VMWare Player may do the trick.

share|improve this answer
    
Thanks for your tip. How much time does it take to configure VMWare Player? Can it access drives on the system just, just as it could when it runs in administrator mode? –  sbrattla Apr 26 '11 at 14:04
    
You can even put a legacy OS on there (XP etc?) setup exactly like your old machines. –  Chopper3 Apr 26 '11 at 14:09
    
He could but that seems awfully heavy for just one application that does run fine under newer OSes. –  Jade Robbins Apr 26 '11 at 15:06
    
Just offering an alternative. –  Chopper3 Apr 26 '11 at 15:08
    
Thanks, It certainly could be an alternative, but on the other hand it seems like a lot of "overhead" for a single software used to format hard disc drives now and then. I guess I'll have to try and see if there is another way to get around it. –  sbrattla Apr 26 '11 at 18:03
add comment

There are two possible security levels when using Software Restriction Policies: Disallowed and Unrestricted. You set one of them to be the default security level and then create Rules that either allow or disallow programs to run. 4 types of rules may be created and you then essentially blacklist or whitelist your applications.

That being said, Software Restriction Policies aren't going to make the program in question run as a standard user if the program requires administrator level rights. Software Restriction Policies determine who can run/launch a program, not the user rights for said users.

From the MS help document regarding security levels:

For software restriction policies, the security level options are:

Unrestricted, which allows software to run with the full rights of the user who is logged on to the computer.

Disallowed, which does not allow the software to run.

The Unrestricted decurity levels doesn't elevate the user rights. It allows a program to run with the full rights that the user posseses.

share|improve this answer
    
Thanks! At least i know that's not the path to take... –  sbrattla Apr 26 '11 at 18:02
    
Glad to help... –  joeqwerty Apr 26 '11 at 19:14
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.