Group Policy Preferences can run as a specific user. Not sure whether software installation gpos come under that though.
Typed frustratingly slowly on my BlackBerry® wireless device -----Original Message----- From: Joseph Heaton <jhea...@dfg.ca.gov> Date: Fri, 3 Jun 2011 10:50:20 To: NT System Admin Issues<ntsysadmin@lyris.sunbelt-software.com> Reply-To: "NT System Admin Issues" <ntsysadmin@lyris.sunbelt-software.com>Subject: PowerBroker application - FOLLOW-UP Question I was just on the phone with a reseller for the Scriptlogic product, and he mentioned Group Policy Preferences for what I'm trying to do. Does anyone know if permission elevation for installing specific software is possible through GPP? How is everyone out there handling users installing specific software without making them local admins? This will be a 2008R2/Win7 environment, so would request that answers be based on that, if possible. What we do with older technology isn't necessarily what we can/will do with newer. Also, I know about, and am looking into the BeyondTrust, Scriptlogic and Viewfinity products, so no need to respond with those options, unless you have a big selling point on any of them. As always, I appreciate all help/advice/tips. >>> Joseph Heaton <jhea...@dfg.ca.gov> 5/26/2011 4:24 PM >>> Has anyone used this product, from BeyondTrust? Looks like it would be useful to minimize permission levels on Win 7 boxes. We're looking at using Applocker, and this seems to be a good fit to go along with that, to automatically raise perm levels for apps in Applocker, so normal users can install "whitelisted" applications. Any personal experiences would be most appreciated. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin