• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 434
  • Last Modified:

standard user installing software on sbs2008 server

Is there any way that i can allow a standard domain user, who is connecting to the sbs2008 server via a remote desktop connection the privelidges to install software on the server without giving them administrative rights.
0
topnotchpaul
Asked:
topnotchpaul
  • 6
  • 6
  • 3
  • +1
1 Solution
 
Glen KnightCommented:
No, and why would you want to?!

The RDP sessions on an SBS server are for administration purposes only not to be used for terminal services type access.
0
 
topnotchpaulAuthor Commented:
Ok, if the standard user was to log on directly to the server with basic privelidges how can i allow them to install software but restrict access to active directory and group policy.
0
 
Glen KnightCommented:
You cannot, this is why you don't use SBS as a terminal server.
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

 
topnotchpaulAuthor Commented:
is there a way to give the user who is looging on to the server directly NOT USING REMOTE DESKTOP, elevated rights to install software. I do not want the person to use the administrator account or elevate his account to the highest.
0
 
topnotchpaulAuthor Commented:
If the person was using their own personal account on their local pc i would just add him as a local administartor but the person will be using the server
0
 
Glen KnightCommented:
Only an administrator can install software on an SBS server, the only other option is to run the install as administrator.  But to do that you would need to provide the administrator username/password which kind of defeats the object.
0
 
Glen KnightCommented:
There is no local administrator on a domain controller.
0
 
topnotchpaulAuthor Commented:
cant i provide rights to install via group policy? or give lower level administrative rights
0
 
Glen KnightCommented:
No!
0
 
topnotchpaulAuthor Commented:
Thanks for all your help, just one last question. Does being a domain administrator allow you to access and change active directory and network administrator credentials? If so what is the point of having two administrator accounts.

0
 
bdsuserCommented:
I agree with demazter.  You are asking for trouble letting a standard user have access to the server.  I checked my SBS machines and a standard user can't even login to one.  They can only user remote access to get to there desktop box.  

Bottom line is if you don't trust them to be an administrator, you should not trust them to install software.

However, since you asked.  The easiest thing is to promote them to an admin and then demote them after they installed the software they need.  You can also make them a member of the administrator group and make them a member of another group (eg. create a group called Lowest Level Admin Group).  The second group can be used to deny that person access to things you don't want them to access.  Remember that the Deny security rule always overrides an Allow rule, so use the Deny rule with caution.  
0
 
Neil RussellTechnical Development LeadCommented:
The obviuos question that nobody has asked you is...


WHY?

WHAT Software?

WHY A USER IS LOGGING ONTO YOUR SBS SERVER AT ALL?

Maybe the answer to your question is a completely different solution.
0
 
topnotchpaulAuthor Commented:
Thanks for your prompt help.
0
 
Neil RussellTechnical Development LeadCommented:
" If so what is the point of having two administrator accounts."

The best reason?

Have a look on here how many times somenody asks "I've lost/forgotten my domain admin account password, HELP!"

If you have 2, and put a second on written down, sealed and in the safe..... Your safe.

Thats my reason for having 2.
0
 
Glen KnightCommented:
What was wrong with the answers I provided?
0
 
Neil RussellTechnical Development LeadCommented:
I see his next question being......

"How do i reinstall SBS2008 server? A user has deleted half the server files!!"

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

  • 6
  • 6
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now