[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 411
  • Last Modified:

How I fix the Power User should allow install the application

Hello,

I need to fix the Power User should allow install the application WITHOUT add the power user on the local Administrators group.

Power User can install application, but when DLL update or modify, setup is cancel.

Do you have an idea ?

Sincerely
0
Hitoww
Asked:
Hitoww
  • 3
  • 2
1 Solution
 
nipponsoulCommented:
What OS is that Power user group is having problems on ?
0
 
HitowwAuthor Commented:
On Server 2008 Enterprise
0
 
nipponsoulCommented:
Is it a domain controller ? An application server ?
Is it one particular application like Office for example or any? Are they trying to install printer software?

to be honest I would sort all that via Group Policy and forget power users groups all together ...
0
 
HitowwAuthor Commented:
ok my first question is this:

Adding a user: user1 (on active directory with administrators group).

With administrator rights, but without the ability to add/remove Windows Components (dns, ad, dhcp ...)

Second question : GPO on Domain (user/computer) or Local (user/computer) ?

Thank you
0
 
nipponsoulCommented:
Ok just to clarify the 2 different possibilities here...

1)
You can use Restricted Groups in Group Policy, where you can you can add a domain group such as Domain Users or specific user security groups into the local Administrators group of each workstation in a particular OU provided that your AD is properly structured.

This means that: Every single user in your environment will be an administrator on every single workstation in your environment.

If this is what you want, create an OU containing all of your workstations if you don't have one already (or more), then create a GPO using Restricted Groups as described here: http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
http://www.windowsecurity.com/articles/Securing-Local-Administrators-Group-Every-Desktop.html
On the other hand:

2)
If you only want the primary user of a particular computer to be a local admin on that computer, rather than configuring a group to be local admins, you'll need to do this individually on each workstations rather than through Group Policy.

3)
Have a look at this link, might help you as well:

http://serverfault.com/questions/165013/allow-domain-users-to-install-software-on-their-computers



0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now