+ Post New Thread
Results 1 to 6 of 6
General Chat Thread, Privileged Users Permissions in General; Hi All! Hope your all having a better day than me today! Got an issue we have removed a teachers ...
  1. #1
    mmoseley's Avatar
    Join Date
    Apr 2007
    Location
    Birmingham
    Posts
    751
    Thank Post
    109
    Thanked 105 Times in 80 Posts
    Blog Entries
    2
    Rep Power
    43

    Privileged Users Permissions

    Hi All!

    Hope your all having a better day than me today!

    Got an issue we have removed a teachers admin rights, god knows how or why he had them!

    We want him to be able to install software on only two machines and be able to change passwords for pupils.

    How can this be done? Bear it in mind that we dont want to give him all rights, just be able to install stuff

    Cheers!
    Last edited by mmoseley; 13th November 2008 at 12:10 PM.

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106
    You can delegate the ability to change passwords easy enough. Software installation is difficult though I would have though. The only awkward way I can think of is make him a local admin then lock him down through the local policy. Disallow control panel etc. Not sure if that would work though.

  3. #3


    Join Date
    Sep 2008
    Posts
    1,754
    Thank Post
    320
    Thanked 258 Times in 211 Posts
    Rep Power
    119
    Create a local account on those 2 machines and get him to log on locally?

  4. #4
    SteveBentley's Avatar
    Join Date
    Jun 2007
    Location
    Yorkshire
    Posts
    1,431
    Thank Post
    119
    Thanked 263 Times in 189 Posts
    Rep Power
    72
    Can you not do something along the lines of:

    Create a GPO which gives Restricted Groups to assign his account to Administators.

    Create a group which has the computer accounts of the two computers in that you want him to manage

    Set permissions on the GPO so that they apply only to that group.

  5. #5

    Join Date
    May 2008
    Posts
    25
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0
    You can make him a local admin on the 2 machines. NTFS permissions will still protect the network.
    As for changing passwords, that can be done by giving him a custom MMC and delegating permissions for him in AD.

  6. #6

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,512
    Thank Post
    1,320
    Thanked 469 Times in 306 Posts
    Blog Entries
    6
    Rep Power
    199
    This post might help:

    making staff local administrators

    We are going to use the wisesoft password control for delegeted password changers

SHARE:
+ Post New Thread

Similar Threads

  1. FAO: ELGG users and Moodle Users
    By thegrassisgreener in forum Virtual Learning Platforms
    Replies: 18
    Last Post: 3rd July 2009, 07:12 PM
  2. Users folder permissions on server
    By sLiDeR in forum Windows
    Replies: 1
    Last Post: 5th September 2008, 05:43 PM
  3. Replies: 0
    Last Post: 19th September 2007, 02:02 PM
  4. Permissions?
    By kerrymoralee9280 in forum Windows
    Replies: 0
    Last Post: 1st August 2007, 09:25 AM
  5. Replies: 9
    Last Post: 16th June 2006, 09:28 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •