I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have French dictionary without admin right the program will not work properly. I don't want go to each PC and login with admin account then go to program folder located in programs files to give full permission to the group. Is there a way to add them folder in group policy so I can force all the PCs to have full access on the folder? Thanks you in advance.
Group Policy should handle this without problems. Example I have for locking down the C: root folder on Windows 7:
Computer Configuration > Windows Settings > Security Settings > File System > %SystemDrive%\
- Type: Allow, Name: BUILTIN\Administrators, Permission: Full Control, Apply to: This folder, subfolders and files
- Type: Allow, Name: CREATOR OWNER, Permission: Full Control, Apply to: Subfolders and files only
- Type: Allow, Name: NT AUTHORITY\SYSTEM, Permission: Full Control, Apply to: This folder, subfolders and files
- Type: Allow, Name: BUILTIN\Users, Permission: Read and Execute, Apply to: This folder, subfolders and files
- Allow inheritable permissions from the parent to propagate to this object and all child objects: Disabled
If I understand correctly you want to allow a group of people admin rights within a specific folder to allow them to install the program themselves. If that is the case, then I believe you can add a group into your Active Directory such as TEMP ADMIN and add all of the users you want to have the privileges to that group. Then explore or log into your Domain Control, locate the folder and add the group TEMP ADMIN to the security tab under property settings. This should allow the users to access and install the folder contents.