I have a windows 2008 and Active Directory .
My "HARDWARE" department Domain Users allways need to install some programs and alltime need to rights for installing that programs.(They call altime to administrator).
I plan to stop it and I have a idea ,make someone with Restriction administrator right from this group and give ONLY that domain user some admin rights who can help to install that programs when they need.
Can someone help me create that user and give permissions ?
when possible step giude.I do not have to many experience with AD.