Re: I need a better user model... I think...

From: Arek Iskra [MVP] (arek_nospam_at_arekiskra.com)
Date: 08/19/04


Date: Thu, 19 Aug 2004 19:46:24 +0800

The only solution I can see here is to use Group Policy to deploy software
to users, removing their admin rights. However, if your software doesn't
support .msi technology you will need to get third party utility to help you
with creating packages.

-- 
Arek Iskra
Microsoft MVP for Windows Server - Management
"Jog Dial" <JogDial@discussions.microsoft.com> wrote in message 
news:EC3E71FA-4D72-4311-AE53-879FB0E34FE3@microsoft.com...
> Hi,
>
> I'm running w2k3 servers and a 2003 functional level domain.
>
> At the moment, I need to make all users administrators of their own PCs 
> and
> this is turning into a nightmare as they disable administrative shares and
> fiddle with their systems to no end.. installing software they shouldn't 
> etc
> etc.
>
> The reason they are administrators of their own machine is that we are a 
> s/w
> development company and they need to be able to install and run our 
> software
> which loads device drivers ... and they need to load new versions of the
> software nearly every day.. they also need to be able to load other bits 
> of
> software on their own.
>
> At the moment I add them as a user on their own pc so they are a user on 
> the
> domain and administrator of their own PC, but I desperately want to stop 
> this
> practice.  Can anyone tell me where to look for info on setting up users 
> so
> they can install some programs, but not all?  and how to let them install 
> one
> specific device driver?  but not let them disable administrative shares on
> their PCs, or delete the local administrator account?  And I'd like to 
> make
> it so I don't have to add them as a user to their own PC at all... and 
> about
> 25% of these systems are laptops.
>
> I'd appreciate any pointers to howto, white papers, or case studies on how
> people have tackled this sort of problem.
>
> Thanks
>
> -- 
> If a man speaks in a woods and there is no woman there to hear him...
> Is he still wrong? 


Relevant Pages

  • Re: Draft I: Why You Dont Want to Install Software
    ... > reducing the number of local administrators we have lurking around ... The idea of contacting your network consultant to install ... > Enter Windows NT. ... > adware and spyware is a commonplace task for the network consultant. ...
    (microsoft.public.windows.server.sbs)
  • Re: I need a better user model... I think...
    ... > but we have the new install shield which does support msi, ... >> support .msi technology you will need to get third party utility to help ... I need to make all users administrators of their own PCs ... they also need to be able to load other ...
    (microsoft.public.windows.server.general)
  • Re: Draft I: Why You Dont Want to Install Software
    ... > number of local administrators we have lurking around our networks. ... > idea of contacting your network consultant to install software probably ... > could install software. ... > operating system on which businesses would depend to conduct their affairs. ...
    (microsoft.public.windows.server.sbs)
  • Draft I: Why You Dont Want to Install Software
    ... number of local administrators we have lurking around our networks. ... idea of contacting your network consultant to install software probably ... commonplace task for the network consultant. ...
    (microsoft.public.windows.server.sbs)
  • WSUS Installation SAGA
    ... before calling Install on Server ... Its value is 'WSUS Administrators can administer the Windows Server ...
    (microsoft.public.macintosh.general)