Re: security group to install software

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 04/02/04 

Date: Fri, 2 Apr 2004 13:01:36 +0200

Modify the ACL for the %ProgramFiles% within a Group Policy and add the
particular group or user and grant them Full Control.

Computer Configuration\Windows Settings\Security Settings\File System 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
"vincent keller" <npd5@hvc.rr.com> skrev i meddelandet
news:052C572F-31C3-488B-9576-B9C8F619813E@microsoft.com...
> need techs to be able to install software or perform complete os
reinstalls on workstations but I do not want them to have full blown domain
administrator access in the process.  Is there any security groups in AD
that will help my situation.  Any suggestions or links would be
appreciated...

Relevant Pages

  • Re: move objects between group policies rights
    ... It is fine to have full control of Group Policy. ... you need to use the "Delegation of Control" wizard in Active Directory users and computers - or any other tool that is capable of altering AD ACLs. ... a user needs both "create" permission in the new OU and "Delete object" permission in the old OU. ... You can grant pretty much all permission in GPMC. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Admin / Domain Admin rights problem
    ... From what I can tell it looks like subinacl shows that administrators ... have full control of HKLM. ... Group Policy but it should show in Domain Controller Security Policy if SBS ... > Detailed Access Flags: ...
    (microsoft.public.win2000.security)
  • Re: Access is Denied to win2k3 GPOs - really stumped!!
    ... full control. ... I receive an error when trying to open Group Policy via Group ... > Policy Manager or from the default GPO editor since upgrading from Windows ... > Emulator server or the current selection server or any writable DC. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Default Users properties
    ... do to prevent access to other servers is to disable their ability to use ... Computer Management via Group Policy user configuration/administrative ... You can also control access to other computers in the domain by using ... >>from changing passwords, prevent administrators from modifying Group Policy, ...
    (microsoft.public.win2000.security)
  • Re: Prevent users installing software
    ... It takes advantage of Group Policy settings that normally can not be ... As far as access control lists you need to make sure that the users [or ... to exisitng network resources also. ...
    (microsoft.public.windowsxp.security_admin)