In one of my schools i have a Server 2012 R2 network. The Teaching staff need to install software locally on the client computers but i don't want them access to the servers or be able to browse to hidden shares on those servers or even change any settings on the local computers. I just want them to be able to install software!
I can confirm we have Group Policies in place with AD and all works well but i am getting a real headache with their request to install software locally. Orgionaly i created a local admin account on the client machine with a password, but they have to keep selecting the local machine name from the drop down box (windows XP) and then revert back to the Domain name to logon. This is only confusing them as they cannot tell if they are logged on the Domain or local PC. Arrrrgh :)
Help someone please!!! I have had a go at creating in a separate OU and Group Policy a staffadmin account but when i logon as them it says " you need to be an administrator to install software" even though i have added the Teachers to the administrators group via the Server.