I was able to get everything pushed through, but file ownership bit was set last…so permissions could not be set for my domain users on the C:\Windows\Fonts directory. I’ve got the file/folder/registry permissions, but the tricky part is having the attrib and take ownership commands in a batch file occur before the permissions get set. Great quick article…i’m trying to get this working in a GPO. That’s it you done… Log out and test as a normal / non-administrator by right clicking the font and selecting “Install” from the context menu.ġ4 Responses to “Allowing Non-Administrators To Install Fonts In Windows 7” HKLM\Software\Microsoft\Windows NT\Current Version\Fonts
Use regedit and give users modify permissions to the following key in the registry. The last thing to do is give users permissions to register fonts with Windows 7 in the registry. Note: you will receive an Access is denied message, this is normal just make sure users have change security permissions. cacls c:\Windows\System32\FNTCACHE.DAT /e /t /g users:c There is also a font cache that allows programs to display a preview of the fonts this needs softened up as well for the user. The /f directs it to the folder of c:\Windows\Fonts the /r directs it to recurse and the /d n is default answer is no or skip. Log on as an administrator to make the following changes!įirst we need to make the folder writable and make it a non-system folder. As of the writing of this article there are no security holes, but be vigilant and read Microsoft Security Bulletins in the future. Please be careful when making changes that could open security holes. This modification has been tested on Windows 7 however it should also work on Windows Vista as well. The following steps will loosen up security in your operating system, so that normal users can install fonts without administrative credentials and the UAC prompt. If you work for a school or a print shop and do not want to give out Administrator credentials to install fonts read on. If a normal users tries to install a font they are prompted with the UAC (User Account Control) dialog box and Administrator credentials are required. The Fonts directory is located in the Windows directory and if a normal user wants to install Fonts they cannot. I will explain how to allow normal non-privileged users access to install their own fonts without the UAC prompt. Some security features are good other not so much, the security on fonts is a good example. The Windows directory is secured down with permissions so even an Administrator cannot circumvent security. Window 7 is far more secure than prior Windows operating systems.
0 kommentar(er)
