Re: Local Admin on workstation

Hello,

i guess it's this one ?
https://www.microsoft.com/downloads/details.aspx?FamilyId=941B3470-3AE9-4AEE-8F43-C6BB74CD1466&displaylang=en

For this one, type :
FileFormatConverters.exe /?
You will get an help box. so the good way would be:
FileFormatConverters.exe /quiet /passive /norestart

then with psexec :
psexec \\remotepc -c FileFormatConverters.exe /quiet /passive /norestart

For other programs, it depends of setup.
If it's an MSI:
http://msdn2.microsoft.com/en-us/library/aa367988.aspx

A great knowledge base on application setup (to make them silent, set options):
http://www.appdeploy.com/

hope it helps


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:79910A8F-62CE-41DB-AC08-751EBC71A638@xxxxxxxxxxxxxxxx
so how do I execute psexec and create a silent install? I was reading aobut
it and this is definatley something I am interested in.
--
Thanks,,
Kim


"Mathieu CHATEAU" wrote:

They may use their temporary high privilege to create another local admin,
reset the local admin password, install software without license...

I would go on every station to install myself or remotely through remote
desktop

I never give admin privilege to users, even for one day


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5C6CF03D-7AC2-4BC8-864C-D29FB51BE1A7@xxxxxxxxxxxxxxxx
>I was thinking more along the lines of creating a security group, adding
> these users, creating a policy to add the security group to the local
> admins
> group, then editing my script to include the Local group name I > created.
>
> I could then tell the staff to install their own software, office 07
> convertor pack, then move the security group oir disable it somehow > when
> they
> are done.
>
> I do not have it down to te letter yet, so any help and through steps > are
> helpful/
> -- > Thanks,,
> Kim
>
>
> "Mathieu CHATEAU" wrote:
>
>> I wouldn't make them admin for 15 installs...
>>
>> don't you have WSUS ? you may push it through i think
>>
>> You could use psexec but you first need to make a silent install
>>
>> -- >> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:3A074EC6-FB25-40FE-A8B6-C78FCAA3D947@xxxxxxxxxxxxxxxx
>> > Approx 15 machines and I am starting with the 2007 office file >> > format
>> > convertors pack from MS for office 03 machines.
>> > -- >> > Thanks,,
>> > Kim
>> >
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Hello,
>> >> except making them local admin through restricted group in GPO, >> >> they
>> >> won't
>> >> be able to install software.
>> >>
>> >> You may use GPO to deploy software (best if MSI) through GPO >> >> without
>> >> making
>> >> them admin.
>> >>
>> >> You may also just use psexec to make a silent install remotely..
>> >>
>> >> How many PC / which software?
>> >>
>> >> -- >> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> http://lordoftheping.blogspot.com
>> >>
>> >>
>> >> "Kim K" <KimK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> news:FA9B5721-92A8-44F5-AA6E-3C623EEE57C0@xxxxxxxxxxxxxxxx
>> >> >I have many machines that have been set up with restricted access >> >> >via
>> >> >window
>> >> > on the local machine. I have now a need to be able to allow >> >> > certain
>> >> > softwares be installed on those machines that the user can do but
>> >> > due
>> >> > to
>> >> > restrictions cannot at this time.
>> >> >
>> >> > I want to be able to give these users temporary rights to install
>> >> > certain
>> >> > things themselves.
>> >> >
>> >> > Can I do this thru AD and GPO's?
>> >> >
>> >> > Please give me step by step help if so.
>> >> > -- >> >> > Thanks in advance.
>> >>
>> >>
>>
>>



.

Relevant Pages

  • Re: Restricted Group - [WILDPACKET]
    ... Use the Restricted Group GPO to make them Power Users, ... printers but are not local admins. ... They cannot use them because they cannot install without Admin ...
    (microsoft.public.windows.server.active_directory)
  • Re: Deploy Software to AD Security Group ??
    ... So, basically, the benefit here is that a domain admin have all the tools he/she might need on any computer he/she will work on and can choose whether to install it or not if needed on that certain computer. ... Can you please tell me more details about how you use AD Security Group for software distribution? ... Are you trying to send this as a mandatory or optional advertisement? ...
    (microsoft.public.sms.admin)
  • Re: Help w/ pushing/pulling apps to XP pro.
    ... There are a few "tricks" to getting Acrobat to work when assigned via a GPO. ... when I logon as a regular domain user on the XP pro desktops ... However, when I logon as the admin, with the ... > the MSI file get downloaded and install automagically? ...
    (microsoft.public.win2000.group_policy)
  • Re: Login Script
    ... You are working with local policies, so all things you manipulate are ... Install the GPMC ... remove auth.Users from the GPO and add: ... by Security Group, or use ifmember.exe inside your batch. ...
    (microsoft.public.windows.group_policy)
  • Re: installing software via Site GPO?
    ... Actually I was suggesting linking the GPO to the domain or OU (whichever is ... Permissions: Denver Users ... > use that security group). ... >>client go to another site to grab a large Office install, ...
    (microsoft.public.win2000.group_policy)