Solved

remote control of workstation administrator group

Posted on 2008-10-19
14
186 Views
Last Modified: 2013-12-05
I have a 2000 domain and keep my workstation users set as restricted users so that they cannot install unauthorized software.
This causes a headache, as an administrator, as I must change the user permissions for each user each time I need to install new software.

Is there a way, or a utility, that I can use to remotely administor the rights of the user on their workstation or to install software with administrator rights remotely?
0
Comment
Question by:bytor38
  • 5
  • 5
  • 3
  • +1
14 Comments
 

Expert Comment

by:jjreese
ID: 22752370
For installing Software, you could use the "Run As" command...
0
 

Expert Comment

by:jjreese
ID: 22752372
Sorry - Hold down the Shift key then Right click and select "Run As".
0
 
LVL 17

Expert Comment

by:JohnGerhardt
ID: 22752460
jjreese's solution will be fine if you ar eon the machine..
Look at some thing like psexec for launching an install (msi easiest) on a machine remotely.
You can add various switches in order to launch the process as a user with permissions to isntall the software..
Have a look at:
http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
0
 

Author Comment

by:bytor38
ID: 22752480
Thanks, both of these answers are helpful.
However, I am also interested in a solution that will allow me easy access to remotely adjust the user access on their workstations.  Is there a utility for that use?
0
 
LVL 17

Expert Comment

by:JohnGerhardt
ID: 22752487
How about isntall a piece of remote control software like
http://www.ultravnc.com
0
 
LVL 17

Expert Comment

by:JohnGerhardt
ID: 22752496
Else you can edit things like local group assignments by opening up the computer management MMC snap in and then right clickat the top and connect to one of the clients.. You can then add users to groups on that local machine..
0
 

Author Comment

by:bytor38
ID: 22752767
Yes but that is still making the change to each computer one at a time.
I'm looking for a way of updating several wrkstations at once.
0
Are your corporate email signatures appalling?

Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

 
LVL 17

Expert Comment

by:JohnGerhardt
ID: 22752816
Oh ok then you are going to need a little batch file or something..

Create a batch file, something like this...
net localgroup /ADD "GROUPNAME" "USERNAME"
then make a file with the machines that you need in it..
next launch
psexec @groupname.txt -c batchfile.bat -u domin\user

THis will then run on each of the computers in the group and add the user to the group that you placed in the batch file..
Better?
0
 

Author Comment

by:bytor38
ID: 22752987
Thanks, but I'm not wanting to add a user, but rather change the permissions for the existing user.
0
 
LVL 17

Expert Comment

by:JohnGerhardt
ID: 22753322
Do you mean that you are looking chage permissiosn for folder called "x" to allow a user called "y" to have permission "z"...?
0
 
LVL 31

Assisted Solution

by:Henrik Johansson
Henrik Johansson earned 100 total points
ID: 22753969
Install applications by using GPO or SMS
Use GPO to assign group membership, file permissions and registry permissions.
0
 

Author Comment

by:bytor38
ID: 22754270
I have a workstation that belongs to a domain user.
The domain user has restricted access to his workstation.
My question is:  Is there an easier way to make the domain user ( or a group of them) adminstrators of their workstations for the purpose of installing software and updates...easier than changing the permission for each user on each workstation?

GPO may be the way to go, but will it control the access level on the users workstation?
0
 

Accepted Solution

by:
jjreese earned 150 total points
ID: 22763229
Take a look at this - will this do what you want it to?
http://www.serverwatch.com/tutorials/article.php/1497901
 
0
 

Author Closing Comment

by:bytor38
ID: 31507595
Great info, thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now