Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 232
  • Last Modified:

Basic Admin Rights - Ability to install

Hi All,

I have created a Basic Admin account within my domain with the ability to reset passwords in AD and add email accounts to exchange, i would now like the account to have elevated permissions to install when the UAC pops up as users do not have admin rights on machines.

what permission do i need to add for my basic admin account to install, in AD.

Thanks
0
Dan130
Asked:
Dan130
  • 2
1 Solution
 
MaheshArchitectCommented:
You need to add the above account to local administrators group on client machine to install applications
You can user below command through GPO startup script on client computers
net localgroup administrators domain\user /add
OR
You can use GPO preferences as well if you wanted to.
0
 
Dan130Author Commented:
i dont want to add the user to the local admin group. just a like a domain admin has install rights i need to grant rights for this basic administrator account across the domain so we can install on each machine when the UAC pops up.
0
 
MaheshArchitectCommented:
What you want to install ?
If it is software, then you must require admin rights ?
0
 
SandeshdubeySenior Server EngineerCommented:
Normally it is best practic to to add helpdesk admin to local admin group of client computer to manage the admin related task like installing s/w,configuring application,printers,etc.You can use restricted group policy to add heldesk admin to local admin group.
Ensure that restricted group policy is configured correctly else it will not only add required members to local Administratiors, but it will remove any members that were in local Admins previously.You need to select the bottom box under "This Group is a member of," so it won't wipe out current members on all machines.http://www.frickelsoft.net/blog/?p=13

Also you can configure GPO to delploy s/w if you dont want to add heldesk  user to local group.http://www.advancedinstaller.com/user-guide/tutorial-gpo.html

Installing s/w will require local admin or domain admin rights on client computer.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now