How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

Hi all,
I have a company (+150 users) and I would like to allow users to update Java, FLASH and Adobe Reader only.
These software are already installed in the hosts, but there are updates of the program every week and it needs to be updated.
How can I give permissions to every user in the domain to do that? Just "Java, FLASH and Adobe Reader"
Remember that I dont want distribute software because they were installed.
I tried to enable "Enable user to patch evelated products" directive but it didn't work at my domain.
is it possible?

I have a method that works for FLASH player, but am trying to come up with a method for the other 2 myself. To automate flash player, I created a Policy and added the following:
Under Computer Config, Prefrences, Windows Setting, Files I created a new File Item.
I set Action = Replace, Created a Source File named mms.cfg* (more below) and have the destination file as systemroot%\System32\Macromed\Flash\mms.cfg (or %systemroot%\SysWOW64\Macromed\Flash\mms.cfg for x64)
I used notepad to edit the mms.cfg, and used the following in the body:
AutoUpdateDisable=0
SilentAutoUpdateEnable=1
AutoUpdateInterval=0
My non-admin users now update flash in the background silently and automatically.

Similar Messages

Allow Non-Admin Users Update Software Installed In Their Computers

Hello All;
At our location, we have several users who are not always in the office. In some instances, the imac or macbook pro ask for several updates such as Office 2011, and Adobe CS 5 and 6. And, the second issue, these users are not part of the administrator group or ever will be the administrator of their computers.
Is it possible to adjust the authorization file to allow non-admin users to run these sort of updates?
or
Is there a product on the market that can push updates to all these different programs?
Thanks Kindly

Is there a product on the market that can push updates to all these different programs?
Apple Remote Desktop, for one.

Allowing non-admin users to use certain programs without authenticating

I would like to allow certain programs to be run by non-admin users without forcing them to authenticate as an admin. Here is my example: I'm running Parallels Desktop with a VM to Windows. I want to allow my children to use this VM to access Windows programs. But, when starting a VM, the Mac OS requires an administrator to authenticate. Needless to say, I don't want my children to be administrators on the machine. I've been assured that this is not an issue related to how Parallels works (from the support team at Parallels). Instead, this is an issue with the Mac. i'm not sure one way or the other, but it seams useful to be able to (in general) allow non-admin users to use certain programs without forcing them to authenicate as administrators.
There is only one summary in the Mac help on allowing non-admin users to change the time zone settings by directly editing the /etc/authorization file. Does anybody know if this procedure would work for other programs?
Thanks!

If you know what the requested right is, that procedure can be applied to any right in an application with a graphic interface by duplicating and modifying entries. The contents of that file don't control usage of sudo in the Terminal.
(25922)

Allowing non-admin users partial admin privileges

Hi All
I manage a number of Macs on a large corporate (PC-centric) network. Organisation policy prohibits giving users admin privileges. However, I want users to be able to do some admin tasks like installing software, but not to have admin privileges per se. The Parental Controls option for non-admin accounts does not offer sufficient functionality.
All the Macs are stand alone (not managed accounts), and are accessible via Apple Remote desktop. Few of the Mac users are command line savvy, so any solution has to be invisible, or via a simple gui.
Thanks in advance
Dave Mitchelll

Most software does not need to be in the Applications folder to run. Non-admin users can install most drag-and-drop software right inside their home folders and run the apps from there.

I accidentally hit the install software update on my IPad and I am not by my computer and won't be for 2 weeks. Is there any way I can get my IPad off the picture of connecting to ITunes?

I accidentally hit the install software update on my IPad and I am not by my computer and won't be for 2 weeks. Is there any way I can get my IPad off the picture of connecting to ITunes?

No. You must connect your iPad to a computer (it does not have to be yours) in order to restore it to factory settings.
Once you're home, you can restore it from a backup.
Any content that you did not backup has been lost.
~Lyssa

Allows non admin users to add printers

We have some new MacBooks with Mavericks, but I can't figure out how to leave the printer & scanners system preference panel unlocked, so users can add printers wherever they go with their laptops. Is there a way to make it happen?

Follow the instructions for mobile users on this page:
Mac OS X v10.5.7 or later: Allowing managed users to add or delete printers

How to allow non domain users to map to print drivers?

Greetings,
We have a Windows Server 2008 (non R2) 32 bit server that acts as print server. It's also on a domain. Users who are on the domain can easily add the print driver simply by going to device and printers and clicking Add Printer and selecting Network since
I list it in the AD.
The problem arise with well over 100 realtors that walk in and out and need to print. These users are not on the domain. They need to have the print drivers on their computers. I'm hoping we can at least get them to map to the drivers as opposed to unending
local installs.
The management does not want to hear about security, and wants the simplest possible way for their realtors to get up and printing from their computers when they arrive to the office.
Any advice is welcomed.
Thank you!

In the end they got a domain user account that they share to add printers...
Thanks for sharing in the forum. Your time and efforts are highly appreciated.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Trying to install software update, phone stopped responding and gives error code 9

While trying to update software on my iPhone 4, it stopped during installation and gave error code 9, now it says the phone must be restored but will not complete the installation and still gives error code 9, very frustrating. I tried on 3 different computers, same results.

reset preferences -
after effects: http://helpx.adobe.com/after-effects/using/preferences.html
flash: http://helpx.adobe.com/flash/kb/re-create-preferences-flash-professional.html
illustrator: http://helpx.adobe.com/illustrator/using/setting-preferences.html
indesign: https://forums.adobe.com/thread/526990
photoshop: https://forums.adobe.com/thread/375776
if that fails to solve the problem, restart in safe mode and test. if ae works, you have a conflicting non-essential program. you can use your activity monitor to find it.
if restarting in safe mode fails, uninstall, clean (Do a clean install) and reinstall ae.

Allow non-admins to install software?

I find it rather tedious to have to type my password every time others want to install something on the computer (which is a shared computer, by the way). Is there any way to allow a non-admin user to install software, but not have other admin priveleges?

On the screen where you're prompted for the password, find and note down the requested right. Use a program such as TextWrangler to edit the /private/etc/authorization file so that all accounts have that right.
(59954)

ColorSync and non-admin users

Is there a way to allow non-admin users to change ColorSync profiles for printers using the ColorSync Utility? Our non-admin users can launch the utility and see all the printers listed in the "Devices" section but the option to change the default profile for any particular printer is greyed out.
Thanks.

Kurt is far more expert on this than I am, so take his advice first.
Hi,
There are three things to consider...
#1. Profiles in use, like Fast User Switching being on and another User logged in, cannot be changed/edited.
#2. There are at least 2 locations for the .ICCs...
/Library/ColorSync/Profiles/Displays/
/Users/YourUserName/Library/ColorSync/Profiles/
Profiles in the 1st location cannot be edited. ICCs in the 2nd location could have copies made & the copies moved to another User's folder & Rights/Privileges changed accordingly.
#3. See what "Scope" Colorsync reports... I think it has to do whether all users was selected when installing drivers, not certain on that though.

Using mms.cfg file to enable Autoupdate for non-Admin users

I need help in getting this to work. So far it does not.
Adobe Flash for windows 17.0.0.23
Windows 7 Enterprise - 5000 systems
Users are not administrators on systems.
The Non admin user gets prompted with a screen ( we do not want any prompts)
Then the install fails because they are not an administrator.
My mms.cfg file:
AutoUpdateDisable=0
AutoUpdateInterval=1
SilentAutoUpdateEnable=1
How do I use this or any other method to have Adobe Flash update automaticly for all users including non-admins
and give no prompts?
What are the next steps. Is there an enterprise support site or method to use for mass distributions for Flash?
Please Get back to me today before 12:00 EDT 13 Apr 2015.
Gary Pearson
401-233-6898

Hi garyp81126656,
The current mms.cfg file configuration will perform either a notification update or a background update. There are a few options to update non-admin users:
Host the background update resources locally. When using the Adobe servers for background updates there is no way to disable notification updates. By hosting the background update resources locally users will never be prompted to update.
Disable updates and deploy Flash Player updates via SCUP, SMS, or Group Policy.
You can find the various deployment options are listed in Chapter 3 of the Flash Player Administrator's Guide. The Admin Guide also contains information to license Flash Player for distribution within your organization, which is a requirement for any of the deployment methods described in the Admin Guide. Additional information is available at An outline of Flash Runtime installation options
Maria

Majority of reports missing for non admin users

I have followed the instructions here (SCCM 2012–Reporting in console for non-admins (Reporting User Role) v2) to allow non admin users the ability to view
reports in the console. So far, so good. However, when viewing the reports with the non admin user, only about 100 of the 400+ reports appear.
Am I missing something here?

The custom reporting one in the link I provided, and also modified versions of the following:
OS Deployment manager (removed rights to All driver related items (drivers and driver packages), Boot image packages (except read access), Operating system installation packages).
Application Administrator (removed Application>Approve; Distribition Point>Set Security Scope; Distribution Point Group>Set Security Scope; Global Condition>Set Security Scope)
The reports missing we care about primarily are Software ones (companies and products and files).

Just installed software updates and now can't log onto Safari because of some TelevisionFanaticsToolbar plugin. Help?

I just installed software updates to my computer and after restarting cannot access Safara. The message says because of a TelevisionFantaticsToolbar plugins. Cannot find on my computer. How do I delete this and regain access to Safari?

Save and/or quit your applications & documents Go to Applications>Utilities Folder Click Disk Utility Click the Volumne (HD) that you want to check. Click the Repair Disk Permissions button. (Don't worry about verifying) At the bottom of window when the repairs have finished, you will see the “most important thing”: Permission Repairs Complete The privileges have been repaired or completed on the selected volumne.
Restart your computer to confirm repairs.
http://docs.info.apple.com/article.html?artnum=106214 http://docs.info.apple.com/article.html?artnum=25751
http://docs.info.apple.com/article.html?artnum=25751

Applying all update\patches during 'install software update' step

Hi,
I have created software update group (around 10 updates\patches) and deploy it to 'unknown computers' collection. Ts 'Install software update' step scans through and only installs 2 updates out of 10. I have kept deploy property as 'required' while publishing
on 'unknown computers' and 'install software update' has 'All Software update' selected (other option is mandatory update'). I want to have all the 10 required update to be installed . any idea what should be the settings on 'deploy' prperty for software group
that install all the updates in the group during 'install software update' step? Any pointers will be appreciated
Regards,

Hi,
Yes , they need a reboot and reboot is happening automatically. I believe, once reboot is done, other patches should take over with installation. I don't see any information for another updates that are part of same software group. For these 2 succefully
installed updates log has below that indicates they reboot and finish.
WUHandler has log:
1. Update (Missing): Security Update for Windows 7 for x64-based Systems (KB2862330) (35dcb297-873a-45af-bb19-e8b18aedd5bb, 202) WUAHandler 2/5/2014 8:09:02 AM 2760 (0x0AC8)
2. Update (Missing): Update for Windows 7 for x64-based Systems (KB2834140) (88152097-0294-4098-b27c-d2fd479e9831, 202) WUAHandler 2/5/2014 8:09:03 AM 2760 (0x0AC8)
Update 1 (35dcb297-873a-45af-bb19-e8b18aedd5bb) finished installing (0x00000000), Reboot Required? Yes WUAHandler 2/5/2014 8:09:06 AM 2348 (0x092C)
Update 2 (88152097-0294-4098-b27c-d2fd479e9831) finished installing (0x00000000), Reboot Required? Yes WUAHandler 2/5/2014 8:09:09 AM 356 (0x0164)
Update (35dcb297-873a-45af-bb19-e8b18aedd5bb) has finished the post reboot operation. HResult: 0x00000000. WUAHandler 2/5/2014 8:10:46 AM 2152 (0x0868)
Update (88152097-0294-4098-b27c-d2fd479e9831) has finished the post reboot operation. HResult: 0x00000000. WUAHandler 2/5/2014 8:10:46 AM 2152 (0x0868)
Any pointers to figure out the status of other patches\updats that are part of same group?
Regards,

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

How to allow non-admin users to install software updates of Java, FLASH and Adobe Reader?

Similar Messages

Maybe you are looking for