Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Windows 2008 domain with Vista workstations.

I don't want users to have admin rights on their machines, but I want to allow them to install a specific company application.

This application is signed.

share|improve this question

I would suggest that group policy would be perfect for this - the software is installed at logon (usually invisibly) and the users need no additional rights at all.

This link at Microsoft gives an overview.

share|improve this answer
Correct solution if you have a MSI built wich supports unattended installation (msiexec /qb). Note that software published via GPO gets installed before the user logs on. – pauska Jul 21 '09 at 13:48

Create an AD group, such as "Corporate Application". Add the machines that you want to receive the app to this group.

Create a Startup Script which installs this app when the computer restarts, add the startup script to group policy.

share|improve this answer

I haven't used them but you might be able to do this with Software restriction policies

share|improve this answer

I've deployed non-MSI installers using the Symantec deployment tool included with the anti-virus corp edition. When selecting a package to deploy just pointed it at the setup.exe file that I wanted to have installed, instead of the anti-virus client and ran though the same steps as if it was the symantec anti-virus client that was being installed.

Don't know if you have symantec corp but if you do, thats an option.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.