Solved

Group Policy to install programs

Posted on 2013-05-22
5
402 Views
Last Modified: 2013-05-22
Hello,

I have a Windows 2008 R2 AD domain controller, and want to add a group policy allowing users to install programs on their computers, but I do not want to give them local administrative rights. Using the Group Policy Editor on the Domain Controller, how do I enable a Policy that allows users to install software on their computers?

Thanks,
john
0
Comment
Question by:jhieb
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 14

Expert Comment

by:comfortjeanius
ID: 39187413
0
 
LVL 55

Accepted Solution

by:
McKnife earned 500 total points
ID: 39187416
The question is: any software OR certain software that you assign?
If only assigned software: no problem, navigate to the user configuration section - policies - Software settings - software installations - there you go. MSI packages that you assign there can be installed by weak users via appwiz.cpl -> selection "install programs from the network".

If ANY software: very bad. This would enable them to compromise the system and should not be taken into account if security matters.
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187511
comfortjeanius,

The link you sent me has a step for creating a Group Policy Object. In the following steps, it says to:

1.Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.In the console tree, right-click your domain, and then click Properties.
3.Click the Group Policy tab, and then click New.

While on the DC as a Domain Administrator, when I right click on the domain and select properties, I do ont see the Group Policy Tab. Do you know why, and what else needs to happen so that I see the Group Policy Tab?
0
 
LVL 1

Author Comment

by:jhieb
ID: 39187515
McKnife,

Thanks, this sounds like what I want to do. The odd thing, is that I do not see the Users section of the Group Policy Editor. I am not sure why I don't see it. Perhaps, it is too early in the morning for me. Have any ideas?
0
 
LVL 1

Author Closing Comment

by:jhieb
ID: 39187560
Thank you. This worked.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question