Solved

administrator account only for software install

Posted on 2014-01-13
4
366 Views
Last Modified: 2014-01-16
i have a windows 2012 AD  and i would like to give someone minimal admin permission who can install a software install under server.
how can i and which account?

Thanks
0
Comment
Question by:apollo-13
4 Comments
 
LVL 18

Assisted Solution

by:Andrew Davis
Andrew Davis earned 167 total points
ID: 39778507
Give them local administrative permission and then deny them anything that you dont want them to have via group policy.

Cheers
Andrew
0
 
LVL 8

Assisted Solution

by:barrykfl
barrykfl earned 166 total points
ID: 39778509
You can use software installation Policy delegate to some OU and Groups
0
 

Author Comment

by:apollo-13
ID: 39778519
hi
can you give me links for learning?
thanks
0
 
LVL 11

Accepted Solution

by:
Manjunath Sullad earned 167 total points
ID: 39778700
Software Restriction Policies:

Computer or User Configuration->Windows Settings->Security Settings->Software Restriction Plicies

AppLocker policies:

Computer or User Configuration->Windows Settings->Security Settings->Application Control Policies->AppLocker


There are some useful articles may guide you to accomplish it:

How To use Software Restriction Policies in Windows Server 2003

http://support.microsoft.com/kb/324036

Step-by-step Guide on configuring AppLocker in the Domain

http://esihere.wordpress.com/2011/06/18/step-by-step-guide-on-configuring-applocker-in-the-domain/

Using Software Restriction Policies with AppLocker Policies

http://technet.microsoft.com/en-us/library/ee791851(v=WS.10).aspx


Source : http://social.technet.microsoft.com/Forums/windowsserver/en-US/cf45336f-db49-4739-bc54-38869e2e075b/how-to-restrict-users-from-installing-certain-softwares-through-group-policy?forum=winserverGP
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Every now and then, Microsoft does something that totally impresses me. It doesn't happen often, but in this case I must say I am thoroughly impressed with Windows Server Backup. One of the long time issues with Windows Backup has been the ability t…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question