Re: Flash Install needs Administrator Rights

From: Oli Restorick [MVP] (oli_at_mvps.org)
Date: 04/27/04 

Date: Tue, 27 Apr 2004 23:26:17 +0100

Hi

Placing the user in the administrators group on the DC will make them an
administrators of the DCs for that domain. Placing them in the Domain
Admins group will make the users administrators of their workstations
provided the computers are in the same domain, although doing that is the
craziest thing I've ever heard.

When you say you Group Policies give users non-admin rights, what do you
mean? The default settings don't give users admin rights, so what did you
change? Which GPO settings have you touched? What's the exact error
message you get?

The restricted groups feature allows you to replace the membership of the
local administrators group on the PCs with members of your choice. However,
beware. It will remove anyone who's already present in the local
administrators group and, if you apply it to the wrong OU, you can make a
real mess.

Since you're contemplating walking around yourself, it sounds like you are
probably too small a company to consider some sort of systems management
solution (like Microsoft Systems Management Server), but this is a solution.

If the Flash installer was an MSI file, it would take two seconds to deploy
using a GPO.

Hope this helps

Oli

"Scot Welker" <scotwelker@yahoo.com> wrote in message
news:c29dc682.0404270958.1336919d@posting.google.com...
> Now that I'm tired of banging my head against the wall, I wanted to
> post this question:
>
> I am trying to allow users to install Macromedia Flash on their local
> workstation. Our Group Policies give users non admin rights but I
> have made the users both Domain Admins and Administrator rights from
> AD without effect on the install. It still tells me I have to be an
> admin user to install the software. Do I actually have to physically
> add these people at the workstation to be administrative users on the
> domain? I tried adding them at the computer level in AD with
> administrative rights...again no effect. I thought by making them an
> administrative user at the server level would allow them admin rights
> to the workstation. I'd rather not have to walk around to every user
> and hear about the latest story about their kids. Can I not handle
> this on a server level or am I screwed?
>
> Thanks in advance

Relevant Pages

  • Re: Limit administrators permissions
    ... Remove the administrators group from the documents and settings folder ... >> local admin, otherwise it does not install the Office ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Admin Rights
    ... Local Administators at that workstation, ... local Admin would still work, but they would have no access from machine to ... name it something like Workstation Administrators. ... > admin rights, ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Local Admin Rights
    ... First of all, you would make them local administrators, not domain admins, ... admin rights, ... not the domain-wide administrators group. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Installing Software and Permissions
    ... etc etc on my TS Server. ... Security group and they'll have TS admin permissions... ... Added TS_Admins to the Local group on the TS Server - Administrators ... member of the TS_Admins group and try and install a piece of software.... ...
    (microsoft.public.windows.terminal_services)
  • Re: Admin right for station
    ... You could add "NT Authority\Interactive" to the local Administrators ... This is more secure than adding "Authenticated Domain Users", ... It runs under the system context and has admin rights. ...
    (microsoft.public.windowsxp.security_admin)