Link to home
Start Free TrialLog in
Avatar of FTGE
FTGE

asked on

Is there a way to setup up Permissions so regular users can update antivirus daily but not be able to install stuff?

I have workstations and vpn remote users with laptops. They can't update their virus protection software or other installed software on their machines. The remotes and local workstations are on a windows 2003 server domain with active directory. Can these users still be restricted so they don't delete or cause havoc to their machines the way they are currently, and somehow give them permisssions to update existing software on the machine? (Such as Anti virus, etc..) The workstations are all windows xp.
Avatar of flipmedia
flipmedia

Hi,
Could you please explain what type of antivirus you are using there.If its a corporate antivirus,i am sure that you can update the clients centrally by pushing the updates form the server itself,without changing the access restrictions of the users.
the antivirus services should run as local administrator, and hence be able to self update
Avatar of FTGE

ASKER

does this mean assign the user as an administrator on their local machine not through active directory? Doesn't this give them rights to install foreign software as well? Isn't their some sort of group policy setting that could be made instead?
ASKER CERTIFIED SOLUTION
Avatar of enzogoy
enzogoy

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial