Re: How to allow "Admin" account to install software?
- From: "JUK" <creative_spirits@xxxxxxxxxxx>
- Date: 8 Jun 2006 16:20:40 -0700
I've just promoted our fileserver to a primary domain controller and
have a little trouble solving the start-up tasks. One of these is: How
can I allow the "Admin" account to install software?
Create a domain security group (i.e.: "WksAdmins"). Select the domain users
of people who is going to perform installations on your clients and make them
members of WksAdmins; these users don't need to be members of other groups
(as Domain Admins). Create a GPO and modify the "Restricted Groups" policy to
make WksAdmins domain group member of the local Administrators group. Link
this GPO to your clients' OU. When the policy will propagate to clients, the
WksAdmins members will be local administrators of all machines in the target
OU.
Aha! That's a different approach altogether. I learned it could be done
by joining the accounts to the client's local admin group (which works
using a startup script). Your approach seems to avoid the scripting and
I'll give it a shot today.
Thanks Carlo!
Jens
.
- References:
- Prev by Date: Re: New Hard Drive Won't Boot
- Next by Date: Re: User deactivated after accessing shared directories
- Previous by thread: How to allow "Admin" account to install software?
- Next by thread: RE: Event ID 1114 - But there are no printers
- Index(es):
Relevant Pages
|
