How do I grant a group of uses the rights to install apps on their computers (Active Directory)

I am simply looking for the proper way to allow a group of domain users (using Active Directory running on Windows Server 2003) the rights to install applications on their local PCs. Their elevated rights should only be local, I don't want to grant them any additional access to the network resources.

The majority of users do not have this privilege, which is as it should be, but I'd like to let some people install things without having to have me come do it for them.

Suggestions?
LVL 2
SootahAsked:
Who is Participating?
 
zelron22Connect With a Mentor Commented:
It depends on whether or not it's okay for those users to have admin access on that group of machines, or whether you only want each user to have access on their own machine.

If you create an AD group, add all of these special users, and then add that group to each machine's local admin group, then they'll all have admin rights on each of those machines.  

Another option is to add them individually to their own machine's administrators group.

0
 
flyingskyConnect With a Mentor Commented:
add that AD group into local admin group
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.