Re: Local Admin on workstation

They may use their temporary high privilege to create another local admin, reset the local admin password, install software without license...

I would go on every station to install myself or remotely through remote desktop

I never give admin privilege to users, even for one day


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:5C6CF03D-7AC2-4BC8-864C-D29FB51BE1A7@xxxxxxxxxxxxxxxx
I was thinking more along the lines of creating a security group, adding
these users, creating a policy to add the security group to the local admins
group, then editing my script to include the Local group name I created.

I could then tell the staff to install their own software, office 07
convertor pack, then move the security group oir disable it somehow when they
are done.

I do not have it down to te letter yet, so any help and through steps are
helpful/
--
Thanks,,
Kim


"Mathieu CHATEAU" wrote:

I wouldn't make them admin for 15 installs...

don't you have WSUS ? you may push it through i think

You could use psexec but you first need to make a silent install

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3A074EC6-FB25-40FE-A8B6-C78FCAA3D947@xxxxxxxxxxxxxxxx
> Approx 15 machines and I am starting with the 2007 office file format
> convertors pack from MS for office 03 machines.
> -- > Thanks,,
> Kim
>
>
> "Mathieu CHATEAU" wrote:
>
>> Hello,
>> except making them local admin through restricted group in GPO, they
>> won't
>> be able to install software.
>>
>> You may use GPO to deploy software (best if MSI) through GPO without
>> making
>> them admin.
>>
>> You may also just use psexec to make a silent install remotely..
>>
>> How many PC / which software?
>>
>> -- >> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:FA9B5721-92A8-44F5-AA6E-3C623EEE57C0@xxxxxxxxxxxxxxxx
>> >I have many machines that have been set up with restricted access via
>> >window
>> > on the local machine. I have now a need to be able to allow certain
>> > softwares be installed on those machines that the user can do but >> > due
>> > to
>> > restrictions cannot at this time.
>> >
>> > I want to be able to give these users temporary rights to install
>> > certain
>> > things themselves.
>> >
>> > Can I do this thru AD and GPO's?
>> >
>> > Please give me step by step help if so.
>> > -- >> > Thanks in advance.
>>
>>



.

Relevant Pages

  • Re: Client machine problems after join of SMB2003 domain
    ... the usual process for joining a workstation to the domain is: ... disjoined the client machines from Domain1 and joined them to Domain2. ... I tried to install an update to Nero 7 and got 66 ... tried to isntall as local admin and when that failed as ...
    (microsoft.public.windows.server.sbs)
  • Re: Further Questions on Adding group to local administrators group via GPO
    ... There are multiple ways of achieving the result required, and it depends if you want to install it for all users on certain machines or for all machines for certain users. ... you need to create a policy and go to the Software section of the machine component and create the install package. ... you do not require Local Admin rights to get the installation of the Software to work.. ...
    (microsoft.public.windows.server.sbs)
  • Re: SMS 2003 must use domain admin. to install?
    ... You need to add the MEMBER_SERVER$ to the local admin group on the DC. ... you want to publish in AD you have to give the same account full control ... >>> I try to install SMS2003 using advanced security, ...
    (microsoft.public.sms.setup)
  • Re: Assigning applications to clients with USER GROUP privilege
    ... the security group and relogged on the same problem occured. ... >> network they were not able to install frontpage because the desktop ... > You can temporarily grant the user local admin rights. ... >>> I don't like adding users to the local administrators group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Creating folder - Marina Roos
    ... the same user account also created in the local computer ... and add to local admin group aswell. ... This program will install per user ...
    (microsoft.public.backoffice.smallbiz)