Forum Discussion
TurtleDeagon
Oct 23, 2023Copper Contributor
Group Policy to allow specific users to install specific software without admin privileges
I am a newly system administrator for an organization and I am trying to create a Group Policy that will allow specific users to download and use certain software like LogMeIn123 without having to us...
LeonPavesic
Oct 25, 2023Silver Contributor
Hi TurtleDeagon,
To deploy "LogMeIn123" to specific users without granting them full admin privileges, you can try to use the following steps:
Prepare the Software Package:
- Make sure you have a compatible installation package for LogMeIn123. If you have an MSI installer, that's ideal. If not, you may need to repackage the software into an MSI format. You can use tools like msiexec, WiX, or third-party applications for this purpose.
- Place the LogMeIn123 installation package on a network share accessible by the target computers. Ensure that the share permissions are set so that the user accounts you specify in Group Policy have read access to the folder containing the installation package.
Create a New Group Policy Object (GPO):
- On your Windows Server 2012 R2, open the Group Policy Management Console (GPMC). You can do this by running "gpmc.msc" from the "Run" dialog or a command prompt.
- Create a new GPO by right-clicking on the domain or OU where you want to deploy the software and selecting Create a GPO in this domain, and Link it here...
- Give the GPO a name and click OK.
Configure the GPO to Deploy LogMeIn123:
- Expand the GPO in the GPMC and navigate to Computer Configuration > Policies > Software Settings > Software Installation.
- Right-click on Software Installation and select New > Package.
- Browse to the network share location where the LogMeIn123 installation package is located and select it.
- Click Open.
- In the Deployment Properties dialog box, click the Assigned to tab.
- Click Add and select the security group that contains the users you want to allow to install LogMeIn123.
- Click OK to close the Deployment Properties dialog box.
- Click OK to close the Software Installation dialog box.
Link the GPO to the Appropriate OU:
- Right-click on the GPO in the GPMC and select Link an Existing GPO.
- Select the OU where the target computers are located.
- Click OK.
Test the Deployment:
- Log in as one of the users in the security group that you assigned the GPO to.
- Restart the computer.
- Log in again and check to see if LogMeIn123 is installed.
Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.
If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)
TurtleDeagon
Nov 08, 2023Copper Contributor
I am having an issue turning the file back into msi. Is that necessary or is there another alternative? LeonPavesic
- LeonPavesicNov 09, 2023Silver Contributor
Hi TurtleDeagon,
thanks for your update.If you have the LogMeIn123 installation file in .exe format and need to convert it to .msi for deployment, there are a few methods you can use:
1. Manual Conversion Using Command Line: Some .exe installers allow extraction of .msi files using command line parameters.
For example, you can try running `<file.exe> /s /x /b"<folder>" /v"/qn"` in the command line, replacing `<file.exe>` with your .exe file and `<folder>` with the target folder where you want the MSI package to be saved.2. Application Repackaging Tools:
Some free tools include AppDeploy Repackager and Microsoft Orca.3. LogMeIn123's Mass Deployment:
LogMeIn123 provides a guide for mass deployment of their software, which might be helpful.
Here are some links as a reference:
(1) 3 Ways to Create MSI Packages from EXE Installers - FixMe.IT Official Blog. https://blog.techinline.com/2019/09/24/create-msi-packages-from-exe-installers/.
(2) What is the best (free) tool to wrap an .exe into a MSI?. https://serverfault.com/questions/22313/what-is-the-best-free-tool-to-wrap-an-exe-into-a-msi.
(3) Mass Deployment of Host Software on Windows (Silent Install). https://support.logmeininc.com/central/help/mass-deployment-of-logmein-host-software-silent-install-central-t-central-deploy-silent-install%C2%A0.Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.If the post was useful in other ways, please consider giving it Like.
Kindest regards,
Leon Pavesic
(LinkedIn)- TurtleDeagonFeb 05, 2024Copper Contributor
Sorry for taking so long to get back on this project. To clarify, I was able to turn the exe into the msi. I created a group policy under our domain. In the specific department I want the application to run, I linked it there in the OU.
In the GPMC, in the security filtering I have the users that I want to be able to access this software. Another questions, if I only want the specific users to use this software should I remove authenticated users? Is there anything else that I might be missing? I really do appreciate your time on this
- hydrarabbegSep 15, 2024Copper Contributor
TurtleDeagon But if the users find a workaround and rename whatever package with that name to install it !?