Re: Question about security group



Hi
To install software they need to bee at least local admins.
To add them automatically to local admins groups you can use restricted
groups policy.
I don't recommend this because sounds like you want to allow all users to
install software and this can cause you more problems than resolving them,
remmember if you allow software installation to all users this also means
that they are able to install and run virus, etc... So you should consider
this once again.


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Jon LaBarge" <jonlabarge@xxxxxxxxxxx> wrote in message
news:%23dGqNIVwGHA.1624@xxxxxxxxxxxxxxxxxxxxxxx
We have the need to add users to a restricted AD group for allowing them
to install software on their machines but not to have any admin rights on
the domain. Without having to grant local admin access for each user on
their PC, is there a group that can do this that we can add users to?

TIA!

Jon



.



Relevant Pages

  • Re: I need to give an AD user the ability to install SW on PCs
    ... Integrate the user in the group of the local admins ... ... Imagine all possibilities, a software can integrate in a system, ... to capture it in a single permission called: ... Install Software is the same like full permission on the system, ...
    (microsoft.public.windows.group_policy)
  • Re: In reality, are your users "non administrators" on their desktops ?
    ... in my case since this is a public education organization users ... At times they want to install software on their ... > require them to be power users or local admins? ...
    (microsoft.public.win2000.active_directory)
  • Re: Why is there a C$ share???
    ... > PC's, so they can install software without any problems, and so users are ... > able to logon to different machines. ... > Is there a better way to set this up, not to add them to the local admins ... Try adding INTERACTIVE to the administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • software install
    ... trying to install software on the local machine, ... tell me i do not have rights to do this added user to ... local admins, but still cannot install software, is there ...
    (microsoft.public.windowsxp.general)
  • Re: Question about security group
    ... He doesn't need to have DomainAdmin Rights to install software on local ... you can use restricted groups policy as I already told you. ... Without having to grant local admin access for each user ...
    (microsoft.public.windows.server.active_directory)