Solved

Active directory user with admin rights for software installtion and support

Posted on 2014-03-25
4
33 Views
Last Modified: 2015-07-21
Dear Experts,

I need to deal with IT departments all the time with admin rights for our software installation.

I need to get them to create an OU with the machine and user for our company that has admin rights. The trick is to have the admin rights just for the software installation and not be a security threat to the rest of the domain.

I spoke to the software vendor and they recommend to install the software as a domain admin.

Obviously that creates problems with the clients IT department.

Can you send me a link with the active directory instructions for what I want to do. I need the actual important steps for this please.

I am aiming at having the sales team add this to our documentation.

Regards,

M
0
Comment
Question by:marceloNYC
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 6

Expert Comment

by:vmagan
ID: 39953793
why  not create the OU and only provide local admin rights if the software is being installed on PCs?

You can push local admin rights down to the OU doesn't need to be admin rights if all you are doing is installing software on the pcs.
0
 

Author Comment

by:marceloNYC
ID: 39953812
As per the vendor it is ideal to install the software with domain admin right because of some data base accounts that are created for the software. The software has to have ms sql express installed as well. Something like that I was told.
0
 
LVL 6

Accepted Solution

by:
vmagan earned 500 total points
ID: 39954046
take a look at this on how to limit the domain admin. Let me know what you think.

http://serverfault.com/questions/83686/how-to-create-a-limited-domain-admin-that-does-not-have-access-to-domain-contr
0
 

Author Comment

by:marceloNYC
ID: 39954082
Let me tested and I will get back to you. I need a couple of days please.

Thanks!
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question