I want to allow USER right to install software[the pc is not belong to a
domain]
but i cant find those policy
where is it

You are rather limited when the computer does not belong to a domain. You
would have to make the user a power user or an administrator even if just
temporarily. In an Active directory domain you can either publish or assign
software via Group Policy but that is not possible in a non domain
environment. You also can configure Windows Installer to always install
with elevated privileges via Group Policy [computer
configuration/administrative templates/Windows components/Windows installer
but then any user on the computer can install .msi packages. --- Steve


"Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
news158C5F0-0102-47F6-8647-06ABDF6B5931@microsoft.com...

The user already be power user
but some program still need administrator to install
how can i solve that

"Steven L Umbach" wrote:

Shingooooo wrote:

You must contact the maker of the program and ask them what permissions
needs to be changed for their specific software. See this article by
MVP Rick Rogers for more details:

http://www.rickrogers.org/xpsware.htm

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

You may have no choice but to make the user an administrator even if just
temporarily as some applications require such for installation and that can
not be delegated to other users. You could try enabling auditing of
privilege use and object access both for failure only in Local Security
Policy and look in the security log for failed events. Users can be given
privileges [user rights] but system object access failures for service
control, etc. often are an indication that administrator powers are needed.
Power users already have liberal permissions to folders and the
gistry. --- Steve


"Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
news:C99B8B00-A989-4DDE-B188-8828928D9241@microsoft.com...