Allowing NON Admin users to install FONTS.


August 30, 2012 by aubreykloppers

A Corporate Environment, where you have locked-down PC’s the following works to allow a user access into the FONTS directory to do installations:

Log on as an administrator to make the following changes!

First we need to make the folder writable and make it a non-system folder.

attrib -r -s c:\Windows\Fonts

Next we need to take ownership. The /f directs it to the folder of c:\Windows\Fonts the /r directs it to recurse and the /d n is default answer is no or skip.

takeown /f c:\Windows\Fonts /r /d n

Now let’s give the users permission.

cacls c:\Windows\Fonts /e /t /g users:c

There is also a font cache that allows programs to display a preview of the fonts; this needs softened up as well for the user.

cacls c:\Windows\System32\FNTCACHE.DAT /e /t /g users:c

Note: you will receive an Access is denied message, this is normal; just make sure users have change security permissions.

The last thing to do is give users permissions to register fonts with Windows 7 in the registry. Use regedit and give users modify permissions to the following key in the registry.

HKLM\Software\Microsoft\Windows NT\Current Version\Fonts

See diagram:

HKLMSoftwareMicrosoftWindows NTCurrent VersionFonts

That’s it you done… Log out and test as a normal / non-administrator by right clicking the font and selecting “Install” from the context menu.


One thought on “Allowing NON Admin users to install FONTS.

  1. Gary Magadzire says:

    I have done the steps as stated but as soon as I log into a non-admin account then the rights are gone. What else could be causing this, GP maybe


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: