Re: install software

Hi
Be very careful when giving Admin permissions to other people, especially in
domain controllers.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"choipo" <choipo@xxxxxxxxxxxx> wrote in message
news:F3F361E9-B557-473F-8EAA-67A7B8D8F92A@xxxxxxxxxxxxxxxx
Thanks Norbert. i understand your meaning, but i don't know how to do
this. where can i find the tutorial with more detail step in web ?

"Norbert Fehlauer [MVP]" <n.fehlauer@xxxxxxx> ¦b¶l¥ó
news:%23bdjyo8yHHA.4652@xxxxxxxxxxxxxxxxxxxx ¤¤¼¶¼g...
choipo wrote:
Hi,

I want to let one of my teammates to install software to all my domain
computer, but i don't want to join his account to domain admin.

Which he won't need anyway.

which role have permission to install software to domain computer?

He has to have local administrator rights on all domain computers.
Usually these rights are automatically granted to the group of domain
admins, which makes people think, that you need domain admin rights. :(

You can create a domain group and name it local-admins. Then give those
group local permissions. This can be done with a GPO and the function
"restricted groups".

HTH
Norbert
--
Dilbert's words of wisdom #34: When you don't know what to do, walk
fast and look worried.



.

Relevant Pages