Re: Domain Users

Where do I find the Machine Administrators group? I looked in Active
Directory and could not find that group? Do I have to create it manually?
What settings do I need to apply to that group?
Thanks for your feedback. I really appreciate it.


"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:%23RY5dYtcHHA.3408@xxxxxxxxxxxxxxxxxxxxxxx
One makes any account a machine's admin by adding the
account to the machine's Administrators group.
However, that is not a good idea.
One can use group policy to set the Windows Update
schedule or to use WSUS for updates.
One can advertise software via GPO which can then be
installed by the users (without their being admins) using
Windows Installer privilege elevation.

Most studies show that the larger percentage of problems
on client machines, that the larger amount of support costs,
result from users logging in with admin privileges.

Roger
"JS" <jsap@xxxxxxxxxx> wrote in message
news:O8Vt9$scHHA.2404@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Our computers are joined to the domain and we let domain users to logon
interactively to the domain computers. However, when they are logged on,
they are not able to run windows updates or install software. Does anyone
know how to allow domain users to have administrative rights to the
computer so they can install software? Is there a setting in group policy
that would allow it?

thanks





.

Relevant Pages

  • Re: Domain Users
    ... One makes any account a machine's admin by adding the ... account to the machine's Administrators group. ... Our computers are joined to the domain and we let domain users to logon ... they are not able to run windows updates or install software. ...
    (microsoft.public.windows.group_policy)
  • Re: User unable to install software
    ... Add the user unable to install software to the *workstation* local ... administrators group. ... durring the workstation setup. ... Domain Users ...
    (microsoft.public.windows.server.sbs)
  • Re: User unable to install software
    ... Being a member of the workstations local administrators group is ... 'Repair' a Network Connection or disable and enable a Network ... Effectively this gives the user all capabiliites to the workstation ... however one user can install software and the other can't and I ...
    (microsoft.public.windows.server.sbs)
  • Re: Computer Management Security Problem
    ... Check:To view a user's group membership for a domain, use the resource kit utility Showgrps.exe.. ... Users group to the Administrators group? ... either using the Default Domain GPO or a GPO at the domain level to ... By using a GPO at the domain level and specifying that Domain Users are ...
    (microsoft.public.win2000.security)
  • Re: Logon Script
    ... Administrators group to let all domain users automatically be local admins when they log on to a computer interactively. ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.scripting.vbscript)
Loading