+ Post New Thread
Results 1 to 4 of 4
Windows Server 2000/2003 Thread, Using Group Policy to allow a user to install software in Technical; Our ICT Co-ordinator has asked to have access to be able to install software, e.g. a new font, drivers for ...
  1. #1
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    592
    Thank Post
    154
    Thanked 80 Times in 68 Posts
    Rep Power
    76

    Using Group Policy to allow a user to install software

    Our ICT Co-ordinator has asked to have access to be able to install software, e.g. a new font, drivers for a new piece of IT eqpt etc. As I work 6 hours a week, this seems like a reasonable request, given that we've agreed how to log what he installs for auditting purposes etc.

    I'm trying to provide him access to do this via another login which I have given more access rights to via Group Policy. However, given that installing software writes to the registry and c:\windows etc. I'm wondering whether this is achievable.

    Has anyone else got this working and if so, can you advise which group policy settings need enabling?

    I also thought about setting somethign up via a Power User, but this has been deleted from our Active Directory by the previous postholder by the looks of it.

    Thanks

  2. #2
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,217
    Thank Post
    394
    Thanked 278 Times in 239 Posts
    Rep Power
    75
    Power users is still available on local stations it's not a domain group.

    Power users still have limitations that will cause all sorts of issus with bits of software i'd look into using restricted groups to make the person a local admin on certain stations. As power users is a subset of the administrators group not a superset of users it really doesn't provide much protection so you will save yourself hassle using a local admin.

    Using Restricted Groups

  3. Thanks to cookie_monster from:

    kaphc (16th December 2009)

  4. #3
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    592
    Thank Post
    154
    Thanked 80 Times in 68 Posts
    Rep Power
    76
    That'll be why I couldn't find it in Active Directory then lol!

    Thanks, cookie Monster, will take a look at Restricted Groups and see if that will do the trick.

  5. #4
    azrael78's Avatar
    Join Date
    Sep 2007
    Location
    Devon
    Posts
    383
    Thank Post
    47
    Thanked 37 Times in 33 Posts
    Rep Power
    21

    Cool

    As cookie_monster just said - Local Admin rights may be the way to go, however if you combine these rights with group policy restrictions - you could give him the underlying rights while removing some of the more dangerous parts in theory.

    Another way you could do it - is to add him to a domain group and grant that group specific admin rights on a local PC, particularly c:\windows etc...

    So that they have the underlying rights to install software like an admin would, but they don't have some of the other parts.

    It all depends how you want to do it really - we just give people local admin where they need it and if they break the PC, they live without it for a while - we eventually get around to it, they lose their local admin rights and we reimage the PC in question.

    Fortunately though we have a very limited audience who have any kind of admin rights

    Az

  6. Thanks to azrael78 from:

    kaphc (18th December 2009)



SHARE:
+ Post New Thread

Similar Threads

  1. Group Policy - Set User Desktops and Start Menu's
    By Iain.Faulkner in forum Windows Server 2008
    Replies: 12
    Last Post: 7th September 2009, 11:36 PM
  2. msi install - group policy
    By TechSupp in forum Windows
    Replies: 2
    Last Post: 25th February 2008, 01:22 PM
  3. Replies: 4
    Last Post: 12th July 2007, 09:11 PM
  4. Replies: 15
    Last Post: 1st December 2006, 03:13 PM
  5. Sophos install by Group Policy - Eureka!
    By ajbritton in forum Windows
    Replies: 1
    Last Post: 21st March 2006, 02:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •