• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 231
  • Last Modified:

Basic Admin Rights - Ability to install

Hi All,

I have created a Basic Admin account within my domain with the ability to reset passwords in AD and add email accounts to exchange, i would now like the account to have elevated permissions to install when the UAC pops up as users do not have admin rights on machines.

what permission do i need to add for my basic admin account to install, in AD.

Thanks
0
Dan130
Asked:
Dan130
  • 2
1 Solution
 
MaheshArchitectCommented:
You need to add the above account to local administrators group on client machine to install applications
You can user below command through GPO startup script on client computers
net localgroup administrators domain\user /add
OR
You can use GPO preferences as well if you wanted to.
0
 
Dan130Author Commented:
i dont want to add the user to the local admin group. just a like a domain admin has install rights i need to grant rights for this basic administrator account across the domain so we can install on each machine when the UAC pops up.
0
 
MaheshArchitectCommented:
What you want to install ?
If it is software, then you must require admin rights ?
0
 
SandeshdubeySenior Server EngineerCommented:
Normally it is best practic to to add helpdesk admin to local admin group of client computer to manage the admin related task like installing s/w,configuring application,printers,etc.You can use restricted group policy to add heldesk admin to local admin group.
Ensure that restricted group policy is configured correctly else it will not only add required members to local Administratiors, but it will remove any members that were in local Admins previously.You need to select the bottom box under "This Group is a member of," so it won't wipe out current members on all machines.http://www.frickelsoft.net/blog/?p=13

Also you can configure GPO to delploy s/w if you dont want to add heldesk  user to local group.http://www.advancedinstaller.com/user-guide/tutorial-gpo.html

Installing s/w will require local admin or domain admin rights on client computer.
0

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now