Re: Users: Local Administrators or Not



Hi Ben,

Welcome to this newsgroup.

>From what you described, I understand that you want to know if it is
possible to create the domain user without administrator privilege and they
can still assign the application on the client computer. If it is not your
concerns, please let me know.

As Steve explained, assign application on the client computer need the
local administrator privilege. However you can use the GPO to deploy the
application to the client computer, for detailed steps, please refer to the
following KB article:

302430 How to assign software to a specific group by using a Group Policy
http://support.microsoft.com/?id=302430

Also as I know some applications may not be deployed through group policy.
You need to run a script to add the user to the local administrator group,
and after setup removing it from the local administrator group.

Due to our policy, we do not support how to create a script in this
newsgroup, as your convenience, you can run net/? at the command line for
more information about this command.

Please add this to the start up script (make sure the start up scrip on the
client computer, not the logon script):

Add to the AD group: net localgroup administrators Domain\Username /add
Remove from the AD group: net localgroup administrators Domain\Username /add


More info:

321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based
on
http://support.microsoft.com/?id=321713

Hope the above information helpful, if you have any further issue, please
let me know. I am standing by to help you.

Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.



Relevant Pages

  • Re: Domain Users to have Local Admin rights
    ... make sure that your script works. ... this computer as local administrator and insert USB drive. ... startup script (e.g. OU policy or Default Domain Group Policy). ... Now close this windows and click on ...
    (microsoft.public.windows.server.security)
  • Re: Hacked Workstations
    ... You can use Group Policy to ... You could create a startup script that uses the command [net user ... administrator newpassword] which would assign the built in administrator a ... they may eventually catch on but for domain computers you could put the ...
    (microsoft.public.win2000.security)
  • RE: Errors After Changing Administrator Password
    ... Thank you for posting to the SBS Newsgroup. ... I understand that after change Administrator Account, ... Microsoft CSS Online Newsgroup Support ... >Logon Failure: ...
    (microsoft.public.windows.server.sbs)
  • Old Post: Sci.med.diseases.lyme ADMINISTRATOR
    ... | Report Abuse ... Subject: Re: Sci.med.diseases.lyme ADMINISTRATOR ... >I am the newsgroup leader. ... sci.med.diseases.lyme Lyme Disease and related issues. ...
    (sci.med.diseases.lyme)
  • RE: Users and Groups
    ... > To narrow down the problem, please create a local administrator (not domain ... > This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)