Re: Power users cannot install software?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

On Jun 23, 7:53 pm, ever90...@xxxxxxxxxxx wrote:
On Jun 23, 12:30 pm, jtpryan <jtpr...@xxxxxxxxx> wrote:

I have looked through some of the posts on this and the general
solution seems to be to add the domain users you want to allow to
install software to the local admin or power users group on the
computer itself.

I find this hard to believe from an administrative standpoint.  If you
had 500 users that you wanted to have an ability you need to go to 500
individual machines (either physically or via the server itself) and
add them?  Now I know SBS is max at 75, but still, that is also too
much.  Is there no way to simply give this priviledge to a domain
group once?

Does anybody know different or is this the "final answer"?

Don't consider this the final answer, but there are also groups like
Domain Power Users.  And you can install software through Group
Policy, but not for home/remote workers.  It also depends on what
software they'll be installing.  Hardware drivers and services, for
example, do need installed by an administrator.  But there can be side
effects.  Here, many employees carry a mobile PDA, and receive real-
time email and PIM changes.  But Exchange 2007 and later versions of
Exchange 2003 (specifically store.exe) will disable push on the email
account for any user with enhanced privileges.  You either get an
email account that's separate from your enhanced login, or you live
with less control.  So the solution may vary sharply, depending on
exactly what you want to do.  But you should be able to find something
better than configuring 500 workstations manually.

Hope that helps,
Todd

Actually, these users are set up as Domain Power users and still can't
install software on their local machines.

-Jim
.

Relevant Pages

  • Re: Question about security group
    ... He doesn't need to have DomainAdmin Rights to install software on local ... you can use restricted groups policy as I already told you. ... Without having to grant local admin access for each user ...
    (microsoft.public.windows.server.active_directory)
  • Re: Power users cannot install software?
    ... Domain Power Users. ... And you can install software through Group ... account for any user with enhanced privileges. ... email account that's separate from your enhanced login, ...
    (microsoft.public.windows.server.sbs)
  • Re: Loophole software
    ... How's that client gonna get on that work machine? ... Our users have to have local admin ... rights because we're a software testing lab. ... users HAVE to be able to install software on local ...
    (comp.security.firewalls)
  • Re: Restrict Installation Priviliges
    ... Local admin rights is everything on a machine and now allows you little ... running installers). ... their rights to only be able to install software from the network drive ...
    (microsoft.public.windows.group_policy)
  • Re: GPO to prevent users from installing programs?
    ... "Meinolf Weber" wrote: ... If they are local admin, ... Even if they are normal users, they can install software ... to there user profile where they have full rights, ...
    (microsoft.public.windows.server.active_directory)