Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a custome excel add in. I would like to install it on XP machine (to be added on Excel 2007). The problem I am having is that users don't have admin rights and also they have no permission to edit registry. I have tried to follow this way, but failed because user have no permission to edit registry. Is it possible to to install COM addin with out adminstrative rights and permission to edit registry?

share|improve this question
up vote 3 down vote accepted

COM addins are a big security hole... imho. Allowing non-admin users to be able to install ANY COM addin is potentially giving them any/all access to your machine. COM addins can potentially do anything to your computer... with or without excel running. For this very reason... non-administrator users cannot install COM addins. It's not simply giving them access to making changes to the registry.

If you're unconcerned about security... why not make all users an administrator... if you are concerned about security... find another way.

You can do this with a simple script to deploy this across the network as administrator without having to physically sit at the workstation... or disrupt the current user. Here's an example:

First... download psexec on your admin workstation. This will allow you to start a process on a remote machine.

Second... create a batch-file that will do the work for you. Save it to a network share that the workstations will have access to. Something similar to the following:

@Echo Off
mkdir C:\Some\Directory\for\add-in
xcopy \\some\server\where\addin\is\*.* C:\Some\Directory\for\add-in
regsvr32 C:\Some\Directory\for\add-in\the-addin.dll

Third... remotely execute the file as administrator.

psexec \\some-workstation runas /user:domain\administrator \\server\where\bat\file\is\the-bat.bat

and voila. Dll copied to workstation... registered as administrator... and the user never had to log off... and you didn't have to sit at their computer either.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .