Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Active directory user with admin rights for software installtion and support

Posted on 2014-03-25
4
Medium Priority
?
38 Views
Last Modified: 2015-07-21
Dear Experts,

I need to deal with IT departments all the time with admin rights for our software installation.

I need to get them to create an OU with the machine and user for our company that has admin rights. The trick is to have the admin rights just for the software installation and not be a security threat to the rest of the domain.

I spoke to the software vendor and they recommend to install the software as a domain admin.

Obviously that creates problems with the clients IT department.

Can you send me a link with the active directory instructions for what I want to do. I need the actual important steps for this please.

I am aiming at having the sales team add this to our documentation.

Regards,

M
0
Comment
Question by:marceloNYC
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 6

Expert Comment

by:vmagan
ID: 39953793
why  not create the OU and only provide local admin rights if the software is being installed on PCs?

You can push local admin rights down to the OU doesn't need to be admin rights if all you are doing is installing software on the pcs.
0
 

Author Comment

by:marceloNYC
ID: 39953812
As per the vendor it is ideal to install the software with domain admin right because of some data base accounts that are created for the software. The software has to have ms sql express installed as well. Something like that I was told.
0
 
LVL 6

Accepted Solution

by:
vmagan earned 2000 total points
ID: 39954046
take a look at this on how to limit the domain admin. Let me know what you think.

http://serverfault.com/questions/83686/how-to-create-a-limited-domain-admin-that-does-not-have-access-to-domain-contr
0
 

Author Comment

by:marceloNYC
ID: 39954082
Let me tested and I will get back to you. I need a couple of days please.

Thanks!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question