Hi forum,I am very new to Server 2008 and having some serious problems trying to figure it out, so I am bringing some questions to you experts.. I am running server 2008 with GPO implemented. One problem I am having is on my client computers some of the programs will not run correctly unless the access privledges are elevated to administrator. I have to right click on the program file and select run as, then type in the admin name and password, before the program will run correclty. I need these programs to run with normal status. I have searched many hours and days trying to find a solution to this, but have failed to come up with one. All our workstations are running Windows XP SP3.Next question is, how do I enable remote access to all my clients? I can remote access the server with no problem, but if I try to remote access a client, I get a message that states it can't find the remote client.First question is the most important and any help would be appreciated.Thank you..

hi razzle, help me understand the tie between group policy and the admin rights needed for applications. do we have to elevate priveleges to install the application or just to run it? what are some of the applications that we are having issues with? are we talking about standard COTS products like msft office, adobe reader, etc? or are these line of business applications?as for remote access on the client, there are a couple of ways to do it. you can leverage remote assistance or remote desktop. remote assistance will allow you to interact with the user's session when they grant you permission. remote desktop will allow you to remote into the machine but you will have to kick off any current users. each of these are enabled on the remote tab of computer properties. you can get to this by right-clicking on My Computer, selecting the remote tab and enabling remote assistance and/or remote desktop.enable remote desktophttp://www.microsoft.com/windowsxp/using/mobility/getstarted/enableremote.mspxenable remote assistancehttp://support.microsoft.com/kb/305608hth. /rich ----------------------------------------------------------------- http://cbfive.com

Rich,Thank you for your response. Here is our scenario.. We don't want anyone but admin to be able to install anything, but we want all users to be able to run the programs on their systems and how it is now, these programs have to be run with the run as command and elevate to admin status before they will run properly.These programs include but not limited to:Pinnacle Studio - The program runs, but the user can't run video in and save it.Synergy, Program will not run because it accesses the hard driveSome other programs written especailly for our departmentWe would like to be able to set it up where all programs will run, but only admin can install anything.If you can give us any pointers that would be appreciated.Thank you..

Hi, Regarding programs that needs administrative rights to run, Im afraid we cannot do anything from Windows side unless add users to local administrator group. You have to contact the vendor to check if there is any workaround. To enable Remote Desktop for all clients, create a GPO for XP clients and enable the following policy: [Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Connections] Double-click the "Allows users to connect remotely using Terminal Services" policy and choose Enable. Run "gpupdate /force" and restart the client to test. Thanks. This posting is provided "AS IS" with no warranties, and confers no rights.

unfortunately i don't know of fixes for any of those particular applications but i would highly encourage you to take a look at msft's ACT (AppCompat Toolkit). where possible, it will help you to build shims that intercede on behalf of the user to allow them to run applications that would typically require admin rights. it has a good amount of community traction behind it and there are many shims already available - so you may find one for Pinnacle Studio and/or Synergy. The in-house applications you will probably need to shim yourself.this is really quite an undertaking as you may imagine and there is a volume of information on leveraging this technology. this documentation and the latest version of the tool (5.5) that i know can be found here:http://www.microsoft.com/downloads/details.aspx?FamilyId=24DA89E9-B581-47B0-B45E-492DD6DA2971&displaylang=enhth./richhttp://cbfive.com