asked on

Easy way to add users as local admins

I have a Windows 2003 network.
My users do not have the permissions to install programs on their local PCs.
I want them to have the permission for 1 hour and then take it away, so they can click on a link and install a specific program themselves.
What is the easiest way to do this.

uescomp

I would either install it myself under the admin, or create another user, add the user to the local admin group then when the users are done installing change the password.

uescomp

In AD you should be able to create a security group that allows users to install, you could drop everyone into the group for a limited time and then move them out etc.

ie0

ASKER

Uescomp, what kind of Security group?

Brian Pierce

Further to the previous comment - create a security group and add this to restricted groups to make them admins - then remove them from restricted groups once done - see http://www.frickelsoft.net/blog/?p=13

uescomp

A global group, add all your users you need to install. Then add that particular group to the power users group which will give them enough rights to install on the local pc.

ie0

ASKER

uescomp, does the user need to reboot for it to take effect?

Sudeep Sharma

You could use PsExec to install the software on the remote computer with Domain Administrator account.

PsExec is part of Pstools from Microsoft.

No need to give admin permission to the user for this:
PsExec
http://technet.microsoft.com/en-us/sysinternals/bb897553

PsTools
http://technet.microsoft.com/en-us/sysinternals/bb896649

Example for remote installation:
http://betternetworkdesign.blogspot.com/2009/01/using-psexec-to-remotely-install.html

I hope that would help.

Sudeep

ASKER CERTIFIED SOLUTION

uescomp

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial