Re: group policy question

From: Damian N Leibaschoff [MSFT] (damianl_at_online.microsoft.com)
Date: 03/08/04


Date: Mon, 8 Mar 2004 14:00:08 -0600

Hi,
You need to make sure they are local administrators on the affected
workstations in order to be able to install software, this would be beyond
any policy configuration and would be the first thing to check.

Log on to the workstation as a domain admin (they are local admins by
default), open the Computer Management (Right Click My Computer, Manage), go
to Local Users and Groups, Groups, and open the Administrators group. Add
the domain group or user you want to give local administrative rights here,
use the format DOMAIN\User or DOMAIN\Group.
Ok all the changes, log off and re-test.

Regards,
Damian

-- 
Damian N. Leibaschoff, MS IST, MCSE
Microsoft Corporation
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
"jake" <rondican@hotmail.com> wrote in message
news:Opa$nbUBEHA.3404@TK2MSFTNGP10.phx.gbl...
> Damian,
>
>     I am trying to make sure power users can install software on computers
> within the domain. Right now they cannot. Our old network admin copied
over
> group policies from our old DC and before using SBS2003 we had all the it
> staff as domain admins. Now since we have WSS we cannot have the IT be
> domain admins since there are subsites we do not want them to access, but
> the IT staff need to be able to install and maintain user computers. So do
> you know where I would look in the group policies to allow power users to
> install software?
>
> Jake
>
> "Damian N Leibaschoff [MSFT]" <damianl@online.microsoft.com> wrote in
> message news:e2z7oPUBEHA.2600@TK2MSFTNGP12.phx.gbl...
> > Hi,
> >
> > Are you trying to work with the software that SBS tries to install on
the
> > clients or you want to use your own policies?
> >
> > SBS uses logon scripts to get the software installation going.
> >
> > If you are looking for information on how to do the policies to push out
> > software, check the following:
> >
> > 324750 HOW TO: Assign Software to a Specific Group By Using a Group
Policy
> > in
> > http://support.microsoft.com/?id=324750
> >
> > 816102 HOW TO: Use Group Policy to Remotely Install Software in Windows
> > Server
> > http://support.microsoft.com/?id=816102
> >
> > Regards,
> > Damian
> >
> > -- 
> > Damian N. Leibaschoff, MS IST, MCSE
> > Microsoft Corporation
> >
> > Get Secure! - www.microsoft.com/security
> >
> > =====================================================
> >
> > When responding to posts, please "Reply to Group" via
> >
> > your newsreader so that others may learn and benefit
> >
> > from your issue.
> >
> > =====================================================
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> > "jake" <rondican@hotmail.com> wrote in message
> > news:uoTRS0TBEHA.212@TK2MSFTNGP12.phx.gbl...
> > > Hello,
> > >
> > >     We can I enable/disable adding software in a group policy?
> > >
> > > Jake
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Policys to tight maybe?
    ... I handled this by creating a security group on the server and putting all my ... users who I want to be able to install software, ... setup a new workstation I add this group by default. ... >> member of the local Administrators group on the workstation. ...
    (microsoft.public.windows.server.sbs)
  • Re: Policys to tight maybe?
    ... > Hi John, ... > To be able to install software on W2k or XP, you need the user to be a ... > member of the local Administrators group on the workstation. ...
    (microsoft.public.windows.server.sbs)
  • Re: Allowing Active X controles
    ... not allow them to install software will they still be allowed to install the ... then go to the Group Policy tab. ... it won't interfere with any existing GPO or policys. ...
    (microsoft.public.win2000.group_policy)
  • Re: Allowing Active X controles
    ... not allow them to install software will they still be allowed to install the ... then go to the Group Policy tab. ... it won't interfere with any existing GPO or policys. ...
    (microsoft.public.win2000.group_policy)
  • Re: Allowing Active X controles
    ... Wow thats Awsome Darryl Im deffinatly gonna talk about putting this into ... not allow them to install software will they still be allowed to install the ... then go to the Group Policy tab. ... it won't interfere with any existing GPO or policys. ...
    (microsoft.public.win2000.group_policy)

Loading