CIA-Mike
asked on
How to allow standard users certain administrative access capabilities
Hello,
We have a number of Windows labs where end users have a need to install plugins and update software. I was wondering if anyone has any recommendations about how best to handle that without a tech having to be called each and every time.
We could grant admin rights, but are really not comfortable giving that much capability to users.
I am open to third-party tools as well.
Thanks
Mike
We have a number of Windows labs where end users have a need to install plugins and update software. I was wondering if anyone has any recommendations about how best to handle that without a tech having to be called each and every time.
We could grant admin rights, but are really not comfortable giving that much capability to users.
I am open to third-party tools as well.
Thanks
Mike
ASKER
These are not titles that can be published in AD. Not to mention that is far from an immediate solution when they're in a teaching moment.
I'm looking for something that is similar to Power Users, now that MS has removed that function.
I'm looking for something that is similar to Power Users, now that MS has removed that function.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Think you will have to resort to using GPO to set user rights.
As far as I am aware it is either a standard user or selecting the "Run As" command in Windows 7.
You cannot create a user group in Windos 7 Starter, Home basic and Home Premium.
Maybe in other Windows 7 versions but am not too sure.
What a pain
As far as I am aware it is either a standard user or selecting the "Run As" command in Windows 7.
You cannot create a user group in Windos 7 Starter, Home basic and Home Premium.
Maybe in other Windows 7 versions but am not too sure.
What a pain
ASKER
dstewartjr, this might work. I would still apparently need to know in advance, but this might get us closer. Thanks!
Anyone else have any thoughts?
Anyone else have any thoughts?
There's alot of "Community Rules" that you can import into Privilege Authority for the most common apps.
Set them as "published"
This way the connected users can only install the applications published in the Active Directory