Solved

administrator account only for software install

Posted on 2014-01-13
4
369 Views
Last Modified: 2014-01-16
i have a windows 2012 AD  and i would like to give someone minimal admin permission who can install a software install under server.
how can i and which account?

Thanks
0
Comment
Question by:apollo-13
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 18

Assisted Solution

by:Andrew Davis
Andrew Davis earned 167 total points
ID: 39778507
Give them local administrative permission and then deny them anything that you dont want them to have via group policy.

Cheers
Andrew
0
 
LVL 8

Assisted Solution

by:barrykfl
barrykfl earned 166 total points
ID: 39778509
You can use software installation Policy delegate to some OU and Groups
0
 

Author Comment

by:apollo-13
ID: 39778519
hi
can you give me links for learning?
thanks
0
 
LVL 11

Accepted Solution

by:
Manjunath Sullad earned 167 total points
ID: 39778700
Software Restriction Policies:

Computer or User Configuration->Windows Settings->Security Settings->Software Restriction Plicies

AppLocker policies:

Computer or User Configuration->Windows Settings->Security Settings->Application Control Policies->AppLocker


There are some useful articles may guide you to accomplish it:

How To use Software Restriction Policies in Windows Server 2003

http://support.microsoft.com/kb/324036

Step-by-step Guide on configuring AppLocker in the Domain

http://esihere.wordpress.com/2011/06/18/step-by-step-guide-on-configuring-applocker-in-the-domain/

Using Software Restriction Policies with AppLocker Policies

http://technet.microsoft.com/en-us/library/ee791851(v=WS.10).aspx


Source : http://social.technet.microsoft.com/Forums/windowsserver/en-US/cf45336f-db49-4739-bc54-38869e2e075b/how-to-restrict-users-from-installing-certain-softwares-through-group-policy?forum=winserverGP
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question