Create GPO: Allow Access to install
-
Spotify -
Spotify is being allow at a clients; Domain install with effective GPO policies including Folder Redirect. However, Spotify wants certain access to run and or install.
It does not want the ADMIN user to install (error reports install as user).I'm not accustom to creating more complex GPOs. The install wants access to\users%username\AppData\Roaming to install / update/ run.
Thoughts / Suggestions?
-
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
-
@g.jacobse said:
The install wants access to\users%username\AppData\Roaming to install / update/ run.
Nothing about that needs more than limited user account permissions. It suggests the permissions have somehow been modified from default. Possibly those cryptolocker blocker GPOs or a restrictive software policy or file permissions policy or app locker.
-
@thecreativeone91 said:
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
Chrome doesn't install into C:\program files?
-
From this thread (Error Code 13) it appears that some of the coding is a bit harsh in that it wants to install in a location not generally used for installing applications. And thus causes the issue.
-
@Dashrender said:
@thecreativeone91 said:
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
Chrome doesn't install into C:\program files?
Doesn't need to, no.
-
@StrongBad said:
@Dashrender said:
@thecreativeone91 said:
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
Chrome doesn't install into C:\program files?
Doesn't need to, no.
I would call that a misbehaving app then, if by default, it doesn't want to ... aka a way to disregard what the admins want by being able install any ol' software you want on a system.
-
@Dashrender said:
@StrongBad said:
@Dashrender said:
@thecreativeone91 said:
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
Chrome doesn't install into C:\program files?
Doesn't need to, no.
I would call that a misbehaving app then, if by default, it doesn't want to ... aka a way to disregard what the admins want by being able install any ol' software you want on a system.
Would you refer to anything that doesn't need admin privileges misbehaving then? That's all that that means. Nearly every app works this way except for system apps that do dangerous things. What app are you thinking of that requires being installed with a Windows installer and can only run from a system directory?
And even if that were common, it's hardly misbehaving to be copied. If the ability for a file to be copied and still be viable makes it "misbehaving", what isn't misbehaving?
-
@Dashrender said:
@thecreativeone91 said:
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
Chrome doesn't install into C:\program files?
Nope, just the all users or Deployment version does. The normal version installs under the users app data folder.
-
@Dashrender said:
@StrongBad said:
@Dashrender said:
@thecreativeone91 said:
Spotify much as chrome does not need admin rights to "install" Its more of copy files. It used the Userprofile app data. There should be no need to modify GP to allow it unless you are restricting software or changing permissions in Group Policy already that prevents this.
Chrome doesn't install into C:\program files?
Doesn't need to, no.
I would call that a misbehaving app then, if by default, it doesn't want to ... aka a way to disregard what the admins want by being able install any ol' software you want on a system.
why? What would an end user break by installing chrome? sure it might not work with some web app or something but it pulls IE/system proxy information. Also things should be setup at the network level not the computer for internet blocking so very little risk here. You can easily block users from downloading *.exe files, block apps in appdata folder etc.
-
@g.jacobse said:
From this thread (Error Code 13) it appears that some of the coding is a bit harsh in that it wants to install in a location not generally used for installing applications. And thus causes the issue.
Those are pretty normal locations for installing user apps that aren't system wide.
