Allow specific program to update without admin privliges

[rbanke]

Not quite sure where this questions falls, but I figure I'll start here.

I'm working on a new Group Policy for a upgrade I'll be doing. Previously all users were administrators of their pc's, and I've finally talked some sense into the higher ups to allow me to remove that. There is one program that they use however, which is a UNIX client for their billing software that needs to update itself every so often. Without administrator privileges, the update will fail. Is there a way to make software specific exceptions to get around this? Or is there a preferred way to handle this situation that I've not experienced?

Thanks

[wjaf]

Not quite sure where this questions falls, but I figure I'll start here.

I'm working on a new Group Policy for a upgrade I'll be doing. Previously all users were administrators of their pc's, and I've finally talked some sense into the higher ups to allow me to remove that. There is one program that they use however, which is a UNIX client for their billing software that needs to update itself every so often. Without administrator privileges, the update will fail. Is there a way to make software specific exceptions to get around this? Or is there a preferred way to handle this situation that I've not experienced?

Thanks

You can give enhanced permission to the directory structure in question. I have had similar issues to systems I have needed to lock down (like those running MYOB etc) giving admin access to the folders that are needed to be "massaged" solved the problems. As long as the install location is consistent, this should work for you.

How to: (pinched this from another site)

Just go to Group policy editor and computer configuration/windows settings/security settings/file system

Right click add file, then you browse to the folder (if it is being done on the server and the folder is not there cerate it so you can find the path then you can set the permissions by double clicking the folder in the file system.........

[rbanke]

That looks like what I need. I'll try it out, Thanks!