Solved

Group Policy to install programs

Posted on 2013-05-22
5
380 Views
Last Modified: 2013-05-22
Hello,

I have a Windows 2008 R2 AD domain controller, and want to add a group policy allowing users to install programs on their computers, but I do not want to give them local administrative rights. Using the Group Policy Editor on the Domain Controller, how do I enable a Policy that allows users to install software on their computers?

Thanks,
john
0
Comment
Question by:jhieb
  • 3
5 Comments
 
LVL 14

Expert Comment

by:comfortjeanius
ID: 39187413
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 39187416
The question is: any software OR certain software that you assign?
If only assigned software: no problem, navigate to the user configuration section - policies - Software settings - software installations - there you go. MSI packages that you assign there can be installed by weak users via appwiz.cpl -> selection "install programs from the network".

If ANY software: very bad. This would enable them to compromise the system and should not be taken into account if security matters.
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187511
comfortjeanius,

The link you sent me has a step for creating a Group Policy Object. In the following steps, it says to:

1.Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.In the console tree, right-click your domain, and then click Properties.
3.Click the Group Policy tab, and then click New.

While on the DC as a Domain Administrator, when I right click on the domain and select properties, I do ont see the Group Policy Tab. Do you know why, and what else needs to happen so that I see the Group Policy Tab?
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187515
McKnife,

Thanks, this sounds like what I want to do. The odd thing, is that I do not see the Users section of the Group Policy Editor. I am not sure why I don't see it. Perhaps, it is too early in the morning for me. Have any ideas?
0
 
LVL 1

Author Closing Comment

by:jhieb
ID: 39187560
Thank you. This worked.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Suggested Solutions

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now