Re: Has any way to change all the domain users have the right to install the software on local computer?



Thanks very much ,I am really appreciated.
"Anthony" <anthony.spam@xxxxxxxxxxxxxx> дÈëÏûÏ¢ÐÂÎÅ:%23xR1PTKdHHA.984@xxxxxxxxxxxxxxxxxxxxxxx
You can use a GPO to make a user or group a member of the Local
Administrators group, but you can't use it to make a specific person a
member of the Local Administators group on their computer only. You could
use a script to do that, if you have a spread*** matching users and
their computer. But really if you have the concept of handing over a
computer to a particular user with full control, you may as well just do
it manually at the time. What happens afterwards is out of your control.
The problem is that the ability to install software requires full control
of protected areas of the OS, like HKLM, Program Files and System32. There
is no such thing as a right to install software only. So most people try
to use another way to install software such as by GPO, SMS, Altiris or
some other deployment tool. This requires a bigger investment on your part
but results in lower support costs.
Anthony
www.airdesk.co.uk





"lu" <iamfreedom@xxxxxxxx> wrote in message
news:ebeG%23yJdHHA.4616@xxxxxxxxxxxxxxxxxxxxxxx
I commonly go to every machine to add the domain user to the local
administrator group ,it is awful.some guy told me to set in the GPO,but
can
anybody tell me what piece of the GPO have the right to change the
default
the domain user's right have the right to install software on the local
computer?





.


Quantcast