Re: Local Admin on workstation

so how do I execute psexec and create a silent install? I was reading aobut
it and this is definatley something I am interested in.
--
Thanks,,
Kim


"Mathieu CHATEAU" wrote:

They may use their temporary high privilege to create another local admin,
reset the local admin password, install software without license...

I would go on every station to install myself or remotely through remote
desktop

I never give admin privilege to users, even for one day


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5C6CF03D-7AC2-4BC8-864C-D29FB51BE1A7@xxxxxxxxxxxxxxxx
I was thinking more along the lines of creating a security group, adding
these users, creating a policy to add the security group to the local
admins
group, then editing my script to include the Local group name I created.

I could then tell the staff to install their own software, office 07
convertor pack, then move the security group oir disable it somehow when
they
are done.

I do not have it down to te letter yet, so any help and through steps are
helpful/
--
Thanks,,
Kim


"Mathieu CHATEAU" wrote:

I wouldn't make them admin for 15 installs...

don't you have WSUS ? you may push it through i think

You could use psexec but you first need to make a silent install

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3A074EC6-FB25-40FE-A8B6-C78FCAA3D947@xxxxxxxxxxxxxxxx
Approx 15 machines and I am starting with the 2007 office file format
convertors pack from MS for office 03 machines.
--
Thanks,,
Kim


"Mathieu CHATEAU" wrote:

Hello,
except making them local admin through restricted group in GPO, they
won't
be able to install software.

You may use GPO to deploy software (best if MSI) through GPO without
making
them admin.

You may also just use psexec to make a silent install remotely..

How many PC / which software?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FA9B5721-92A8-44F5-AA6E-3C623EEE57C0@xxxxxxxxxxxxxxxx
I have many machines that have been set up with restricted access via
window
on the local machine. I have now a need to be able to allow certain
softwares be installed on those machines that the user can do but
due
to
restrictions cannot at this time.

I want to be able to give these users temporary rights to install
certain
things themselves.

Can I do this thru AD and GPO's?

Please give me step by step help if so.
--
Thanks in advance.






.

Relevant Pages

  • Re: set service start permissions to Administrator only
    ... Mathieu Chateau, who was around all the time ... Word will not attempt to install, ... | for each feature and application is configured as Run from My Computer ... |> Terminal Services. ...
    (microsoft.public.windows.server.security)
  • Re: set service start permissions to Administrator only
    ... Mathieu Chateau, who was around all the time ... After reinstalling Office 2007 a few times, ... Word will not attempt to install, ... | for each feature and application is configured as Run from My Computer ...
    (microsoft.public.windows.server.security)
  • Re: Server 2003 R2 x64 SP2 taking forever to install
    ... "Mathieu CHATEAU" wrote in message ... WAS a prompt but it was hidden behind the Windows Update IE window. ... > completed downloading and started installing approximately 3 hours ... > This is a brand new clean Server 2003 install, ...
    (microsoft.public.windows.server.general)
  • Re: Standard 2003 4GB RAM barrier
    ... It should as it's not an oem license. ... Install the trial and try to register it immediately to be sure it's ok. ... "Mathieu CHATEAU" wrote in message ...
    (microsoft.public.windows.server.general)
  • Re: Deny Interactive Logon but Allow Runas
    ... users may also need to install a fix-pack, ... be an admin to install. ... if your secret app is really so bad ... As our users don't have local admin rights they usually have ...
    (microsoft.public.windowsxp.security_admin)
Loading