Group Policy to install programs

Hello,

I have a Windows 2008 R2 AD domain controller, and want to add a group policy allowing users to install programs on their computers, but I do not want to give them local administrative rights. Using the Group Policy Editor on the Domain Controller, how do I enable a Policy that allows users to install software on their computers?

Thanks,
john
LVL 1
jhiebAsked:
Who is Participating?
 
McKnifeConnect With a Mentor Commented:
The question is: any software OR certain software that you assign?
If only assigned software: no problem, navigate to the user configuration section - policies - Software settings - software installations - there you go. MSI packages that you assign there can be installed by weak users via appwiz.cpl -> selection "install programs from the network".

If ANY software: very bad. This would enable them to compromise the system and should not be taken into account if security matters.
0
 
comfortjeaniusCommented:
0
 
jhiebAuthor Commented:
comfortjeanius,

The link you sent me has a step for creating a Group Policy Object. In the following steps, it says to:

1.Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2.In the console tree, right-click your domain, and then click Properties.
3.Click the Group Policy tab, and then click New.

While on the DC as a Domain Administrator, when I right click on the domain and select properties, I do ont see the Group Policy Tab. Do you know why, and what else needs to happen so that I see the Group Policy Tab?
0
 
jhiebAuthor Commented:
McKnife,

Thanks, this sounds like what I want to do. The odd thing, is that I do not see the Users section of the Group Policy Editor. I am not sure why I don't see it. Perhaps, it is too early in the morning for me. Have any ideas?
0
 
jhiebAuthor Commented:
Thank you. This worked.
0
All Courses

From novice to tech pro — start learning today.