Re: Question about security group

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Jorge,

I appreciate the insight. We already thought about this, but here's the
dilemma:

We have 1 user that needs to install some financial software on multiple PCs
and we do not want this user to have domain admins rights. Would you happen
to know of an alternate method rather than restructuring the AD architecture
to add this one user to a separate GPO?

Thx!

Jon

"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:%23qrZWNVwGHA.4968@xxxxxxxxxxxxxxxxxxxxxxx
Hi
To install software they need to bee at least local admins.
To add them automatically to local admins groups you can use restricted
groups policy.
I don't recommend this because sounds like you want to allow all users to
install software and this can cause you more problems than resolving them,
remmember if you allow software installation to all users this also means
that they are able to install and run virus, etc... So you should consider
this once again.


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Jon LaBarge" <jonlabarge@xxxxxxxxxxx> wrote in message
news:%23dGqNIVwGHA.1624@xxxxxxxxxxxxxxxxxxxxxxx
We have the need to add users to a restricted AD group for allowing them
to install software on their machines but not to have any admin rights on
the domain. Without having to grant local admin access for each user on
their PC, is there a group that can do this that we can add users to?

TIA!

Jon





.

Relevant Pages

  • Re: Installing Software without being Local Admin?
    ... If they are running this ill behaved program on laptops you are about to hit a roadblock that probably can't be overcome. ... Some of you may remember back in June I posted a topic entitled 'Network Computer Games on Business Machines' which detailed the problem we were having with some of our users installing software & games on their machines, as they were local admins. ... So I need to find someway of allowing users to install fix packs/re-install the software, without giving them full local admin access. ...
    (microsoft.public.security)
  • Installing Software without being Local Admin?
    ... Computer Games on Business Machines' which detailed the problem we were ... as they were local admins. ... someway of allowing users to install fix packs/re-install the software, ...
    (microsoft.public.security)
  • Re: Sweet mother of Pete........
    ... "Power Users", but NO local admins. ... than you can imagine every day because my users can't install things. ... I'm POSITIVE the sigs were up to date. ... just pull out of his local address book. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Name Changes
    ... What do they actually need to install all the time? ... If they're local admins, they can usually do what they like. ... purports to scan for spyware as well. ... >> don't add any domain users to the local machines' local groups. ...
    (microsoft.public.exchange2000.admin)
  • Re: SUS server
    ... install the patches. ... if they are local admins they are ... Earn your MS in Information Security ONLINE ...
    (Security-Basics)