How I fix the Power User should allow install the application

Posted on 2011-04-27
Last Modified: 2013-11-05

I need to fix the Power User should allow install the application WITHOUT add the power user on the local Administrators group.

Power User can install application, but when DLL update or modify, setup is cancel.

Do you have an idea ?

Question by:Hitoww
    LVL 6

    Expert Comment

    What OS is that Power user group is having problems on ?

    Author Comment

    On Server 2008 Enterprise
    LVL 6

    Expert Comment

    Is it a domain controller ? An application server ?
    Is it one particular application like Office for example or any? Are they trying to install printer software?

    to be honest I would sort all that via Group Policy and forget power users groups all together ...

    Author Comment

    ok my first question is this:

    Adding a user: user1 (on active directory with administrators group).

    With administrator rights, but without the ability to add/remove Windows Components (dns, ad, dhcp ...)

    Second question : GPO on Domain (user/computer) or Local (user/computer) ?

    Thank you
    LVL 6

    Accepted Solution

    Ok just to clarify the 2 different possibilities here...

    You can use Restricted Groups in Group Policy, where you can you can add a domain group such as Domain Users or specific user security groups into the local Administrators group of each workstation in a particular OU provided that your AD is properly structured.

    This means that: Every single user in your environment will be an administrator on every single workstation in your environment.

    If this is what you want, create an OU containing all of your workstations if you don't have one already (or more), then create a GPO using Restricted Groups as described here:
    On the other hand:

    If you only want the primary user of a particular computer to be a local admin on that computer, rather than configuring a group to be local admins, you'll need to do this individually on each workstations rather than through Group Policy.

    Have a look at this link, might help you as well:


    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
    A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now