How I fix the Power User should allow install the application

Hello,

I need to fix the Power User should allow install the application WITHOUT add the power user on the local Administrators group.

Power User can install application, but when DLL update or modify, setup is cancel.

Do you have an idea ?

Sincerely
HitowwAsked:
Who is Participating?
 
nipponsoulConnect With a Mentor Commented:
Ok just to clarify the 2 different possibilities here...

1)
You can use Restricted Groups in Group Policy, where you can you can add a domain group such as Domain Users or specific user security groups into the local Administrators group of each workstation in a particular OU provided that your AD is properly structured.

This means that: Every single user in your environment will be an administrator on every single workstation in your environment.

If this is what you want, create an OU containing all of your workstations if you don't have one already (or more), then create a GPO using Restricted Groups as described here: http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
http://www.windowsecurity.com/articles/Securing-Local-Administrators-Group-Every-Desktop.html
On the other hand:

2)
If you only want the primary user of a particular computer to be a local admin on that computer, rather than configuring a group to be local admins, you'll need to do this individually on each workstations rather than through Group Policy.

3)
Have a look at this link, might help you as well:

http://serverfault.com/questions/165013/allow-domain-users-to-install-software-on-their-computers



0
 
nipponsoulCommented:
What OS is that Power user group is having problems on ?
0
 
HitowwAuthor Commented:
On Server 2008 Enterprise
0
 
nipponsoulCommented:
Is it a domain controller ? An application server ?
Is it one particular application like Office for example or any? Are they trying to install printer software?

to be honest I would sort all that via Group Policy and forget power users groups all together ...
0
 
HitowwAuthor Commented:
ok my first question is this:

Adding a user: user1 (on active directory with administrators group).

With administrator rights, but without the ability to add/remove Windows Components (dns, ad, dhcp ...)

Second question : GPO on Domain (user/computer) or Local (user/computer) ?

Thank you
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.