Re: AD rights to install software on a machine

Hi Joe,

Can't use restricted groups I'm afriad as it wipes out the existing contents
of all the local groups, and some users are local admins/power users due to
some applications requiring these permissions.

Is there any other way via a GPO, any other security setting that can be
applied just to install software?


"jwd" <jwd@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:545A8319-F764-4627-9DCA-89C94E760E42@xxxxxxxxxxxxxxxx

The account does not need rights in AD to install software instead they
need
rights on the workstations. You can use AD however to apply these rights.

Create a group and put all the accounts that you wish to have
administrative
permissions on the workstations. Then use a Restricted Group policy
setting
in a GPO linked to the OU(s) that contain your Computer accounts to add
this
group to the local Administrators group of the workstations.

Best Regards
Joe Dunn

"Andrew Story" wrote:

Hi, do you know what rights a user account in AD needs to install
software
on a workstation?

I need to create an account that someone can logon as to install
software,
and would like to do this per OU when needed.

Thanks





.

Relevant Pages

  • Re: AD rights to install software on a machine
    ... explicity defining all the 'members' of the builtin\administrators. ... The account does not need rights in AD to install software instead they ... permissions on the workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD rights to install software on a machine
    ... have 2 options from this pint, one is 'members of this group, I assume this ... The account does not need rights in AD to install software instead they ... permissions on the workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Rollback Solution / Password Reset
    ... Mike Davidson Ireland ... environment where workstations are loosing connection to the Domain. ... the server is throwing the account off the domain. ... Instead of the website you're using, I suggest to use OEx (Outlook Express ...
    (microsoft.public.windows.server.active_directory)
  • Re: New Domain Name
    ... Danny wrote: ... Presently my workstations log on to mydomain.ca and ... transfer Files and Settings to new profile? ... account of user that utilizes this particular machine. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Controls for client machines
    ... I am trying to assess the risks that this causes to local data files and network security in general. ... For NT workstations it would be possible to use a NTFSDOS boot disk to ... allows the password of any local account to be set. ... domain account while disconnected from the network. ...
    (microsoft.public.security)
Loading