bytor38
asked on
remote control of workstation administrator group
I have a 2000 domain and keep my workstation users set as restricted users so that they cannot install unauthorized software.
This causes a headache, as an administrator, as I must change the user permissions for each user each time I need to install new software.
Is there a way, or a utility, that I can use to remotely administor the rights of the user on their workstation or to install software with administrator rights remotely?
This causes a headache, as an administrator, as I must change the user permissions for each user each time I need to install new software.
Is there a way, or a utility, that I can use to remotely administor the rights of the user on their workstation or to install software with administrator rights remotely?
jjreese
For installing Software, you could use the "Run As" command...
Sorry - Hold down the Shift key then Right click and select "Run As".
jjreese's solution will be fine if you ar eon the machine..
Look at some thing like psexec for launching an install (msi easiest) on a machine remotely.
You can add various switches in order to launch the process as a user with permissions to isntall the software..
Have a look at:
http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
Look at some thing like psexec for launching an install (msi easiest) on a machine remotely.
You can add various switches in order to launch the process as a user with permissions to isntall the software..
Have a look at:
http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
ASKER
Thanks, both of these answers are helpful.
However, I am also interested in a solution that will allow me easy access to remotely adjust the user access on their workstations. Is there a utility for that use?
However, I am also interested in a solution that will allow me easy access to remotely adjust the user access on their workstations. Is there a utility for that use?
Else you can edit things like local group assignments by opening up the computer management MMC snap in and then right clickat the top and connect to one of the clients.. You can then add users to groups on that local machine..
ASKER
Yes but that is still making the change to each computer one at a time.
I'm looking for a way of updating several wrkstations at once.
I'm looking for a way of updating several wrkstations at once.
Oh ok then you are going to need a little batch file or something..
Create a batch file, something like this...
net localgroup /ADD "GROUPNAME" "USERNAME"
then make a file with the machines that you need in it..
next launch
psexec @groupname.txt -c batchfile.bat -u domin\user
THis will then run on each of the computers in the group and add the user to the group that you placed in the batch file..
Better?
Create a batch file, something like this...
net localgroup /ADD "GROUPNAME" "USERNAME"
then make a file with the machines that you need in it..
next launch
psexec @groupname.txt -c batchfile.bat -u domin\user
THis will then run on each of the computers in the group and add the user to the group that you placed in the batch file..
Better?
ASKER
Thanks, but I'm not wanting to add a user, but rather change the permissions for the existing user.
Do you mean that you are looking chage permissiosn for folder called "x" to allow a user called "y" to have permission "z"...?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I have a workstation that belongs to a domain user.
The domain user has restricted access to his workstation.
My question is: Is there an easier way to make the domain user ( or a group of them) adminstrators of their workstations for the purpose of installing software and updates...easier than changing the permission for each user on each workstation?
GPO may be the way to go, but will it control the access level on the users workstation?
The domain user has restricted access to his workstation.
My question is: Is there an easier way to make the domain user ( or a group of them) adminstrators of their workstations for the purpose of installing software and updates...easier than changing the permission for each user on each workstation?
GPO may be the way to go, but will it control the access level on the users workstation?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Great info, thanks