Solved

Group Policy to install programs

Posted on 2013-05-22
5
384 Views
Last Modified: 2013-05-22
Hello,

I have a Windows 2008 R2 AD domain controller, and want to add a group policy allowing users to install programs on their computers, but I do not want to give them local administrative rights. Using the Group Policy Editor on the Domain Controller, how do I enable a Policy that allows users to install software on their computers?

Thanks,
john
0
Comment
Question by:jhieb
  • 3
5 Comments
 
LVL 14

Expert Comment

by:comfortjeanius
ID: 39187413
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 39187416
The question is: any software OR certain software that you assign?
If only assigned software: no problem, navigate to the user configuration section - policies - Software settings - software installations - there you go. MSI packages that you assign there can be installed by weak users via appwiz.cpl -> selection "install programs from the network".

If ANY software: very bad. This would enable them to compromise the system and should not be taken into account if security matters.
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187511
comfortjeanius,

The link you sent me has a step for creating a Group Policy Object. In the following steps, it says to:

1.Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.In the console tree, right-click your domain, and then click Properties.
3.Click the Group Policy tab, and then click New.

While on the DC as a Domain Administrator, when I right click on the domain and select properties, I do ont see the Group Policy Tab. Do you know why, and what else needs to happen so that I see the Group Policy Tab?
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187515
McKnife,

Thanks, this sounds like what I want to do. The odd thing, is that I do not see the Users section of the Group Policy Editor. I am not sure why I don't see it. Perhaps, it is too early in the morning for me. Have any ideas?
0
 
LVL 1

Author Closing Comment

by:jhieb
ID: 39187560
Thank you. This worked.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now