All posts by Stephen2 (4)

topic: Enterprise Deployment (HDI best deploy this to multiple PCs)  in the forum: SuRun English speaking
Stephen2 #1
Member since Feb 2012 · 4 posts
Group memberships: Mitglieder
Show profile · Link to this post
Thanks Kay, I'll figure something out and share it with the forum when I do.

Please charge money for your software, it is fantastic.
topic: Enterprise Deployment (HDI best deploy this to multiple PCs)  in the forum: SuRun English speaking
Stephen2 #2
Member since Feb 2012 · 4 posts
Group memberships: Mitglieder
Show profile · Link to this post
In reply to post ID 3707
All good deployment strategies need an Uninstall strategy.

Unfortunately, I can't figure out how to make Surun UNINSTALL using command line, without popping up the uninstall box.

Surun /UNINSTALL /QUIET seems to throw an error.

Is there any way to achieve my solution - preferably with the default options:
Keep SuRun Settings - UNticked
Delete group 'SuRunners' - TICKED
Make members of 'SuRunners' to local Administrators - UNticked


Thanks again
topic: Enterprise Deployment (HDI best deploy this to multiple PCs)  in the forum: SuRun English speaking
Stephen2 #3
Member since Feb 2012 · 4 posts
Group memberships: Mitglieder
Show profile · Link to this post
In reply to post ID 3706
haha, I'm so happy, with more forum browsing I found you'd already explained my main question:

To achieve "Set 'Administrators' instead of 'Object Creator' as default owner for objects created by Administrators":
This option is a Windows policy, so SuRun does not export and import it.
You can set it yourself in the registry:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"nodefaultadminowner"=dword:00000000

Thanks Kay - I'm adding SuRun to the work domain I'm responsible for, and removing everyone as Local Administrators of their system (YUCK!)
topic: Enterprise Deployment (HDI best deploy this to multiple PCs)  in the forum: SuRun English speaking
Stephen2 #4
Member since Feb 2012 · 4 posts
Group memberships: Mitglieder
Show profile · Link to this post
In reply to post ID 1808
Subject: Set 'Administrators' instead of 'Object Creator' as default owner
Thanks to everyone in this thread, I'm almost ready to deploy 1.2.1.0 into my workplace domain.

The only part I'm having trouble with is the "Advanced" settings section, replicating these as scripts/GPO policies.

Kay, you've said:
Some expert settings that represent Windows Settings are not backed up/restored by SuRun. You can change these settings directly with ADM files or by using subinacl.exe.

The most important function I'm trying to replicating using scripts/GPO is "Set 'Administrators' instead of 'Object Creator' as default owner for objects created by Administrators.

Could you please describe in detail how to achieve this function through scripting/GPO, in Windows 2008R2 and Windows 7?  If I can just figure this out, I'll be ready to deploy and kill the horrible setup I've inherited from previous network admin!

Also, as a secondary, it would be great to understand how to set each of the 5 "Convenience settings" on/off using command line, or group/security policy?

Actually, I already know three:

1) Allow 'SuRunners' to change 'Power Options' and to select power schemes:
"subinacl.exe /keyreg "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVerion\Controls Folder\PowerCfg" /grant=SuRunners=F"

2) Show Windows update notifications to all users (if automatic updates are activated).
GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Update
Setting: Allow non-administrators to receive update notifications

3) No auto-restart for scheduled Automatic Windows Updates installations
GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Update
Setting: No auto-restart with logged on users for scheduled automatic updates installation

Thank you so much!
Close Smaller – Larger + Reply to this post:
Special characters:
Special queries
Go to forum
Not logged in. · Lost password · Register
This board is powered by the Unclassified NewsBoard software, 20150713-dev, © 2003-2015 by Yves Goergen
Page created in 46.8 ms (18.9 ms) · 59 database queries in 12.6 ms
Current time: 2019-12-10, 13:39:52 (UTC +01:00)