How do I allow specific users to be able to install software but not shutdown the pc.

I have active directory users who all share the same windows 2003 terminal server. I need them to be able to install software but not shutdown the pc. Is it possible to create a group that has this ability?

It is similar to a power user but I looked in active directory and it is not there.
EnformixAsked:
Who is Participating?
 
Nenad RajsicConnect With a Mentor Commented:
you can accomplish that through group policy
create a new policy and link it to your ts OU - disable shutdown here

to make sure that policy is effective only on your terminal server and not on their local machine you need to create a WMI filter for that policy

see attached image for example syntax. just change your server name
wmi.jpg
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.