Solved

Group Policy to install programs

Posted on 2013-05-22
5
400 Views
Last Modified: 2013-05-22
Hello,

I have a Windows 2008 R2 AD domain controller, and want to add a group policy allowing users to install programs on their computers, but I do not want to give them local administrative rights. Using the Group Policy Editor on the Domain Controller, how do I enable a Policy that allows users to install software on their computers?

Thanks,
john
0
Comment
Question by:jhieb
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 14

Expert Comment

by:comfortjeanius
ID: 39187413
0
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 39187416
The question is: any software OR certain software that you assign?
If only assigned software: no problem, navigate to the user configuration section - policies - Software settings - software installations - there you go. MSI packages that you assign there can be installed by weak users via appwiz.cpl -> selection "install programs from the network".

If ANY software: very bad. This would enable them to compromise the system and should not be taken into account if security matters.
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187511
comfortjeanius,

The link you sent me has a step for creating a Group Policy Object. In the following steps, it says to:

1.Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.In the console tree, right-click your domain, and then click Properties.
3.Click the Group Policy tab, and then click New.

While on the DC as a Domain Administrator, when I right click on the domain and select properties, I do ont see the Group Policy Tab. Do you know why, and what else needs to happen so that I see the Group Policy Tab?
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187515
McKnife,

Thanks, this sounds like what I want to do. The odd thing, is that I do not see the Users section of the Group Policy Editor. I am not sure why I don't see it. Perhaps, it is too early in the morning for me. Have any ideas?
0
 
LVL 1

Author Closing Comment

by:jhieb
ID: 39187560
Thank you. This worked.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question