Link to home
Start Free TrialLog in
Avatar of Itzik Hornstein
Itzik HornsteinFlag for Israel

asked on

User Privilege

Greetings

I'm looking for a solution to give the user the ability to installing software on ןד computer but do not let it become administrator

Do you have an idea?
Avatar of cwstad2
cwstad2
Flag of United Kingdom of Great Britain and Northern Ireland image

Is this on a domain or local computer only? You could try adding the person to the power users group  but see below

Basically, Power Users can:

    Run legacy applications, in addition to Windows 2000 or Windows XP Professional certified applications.
    Install programs that do not modify operating system files or install system services.
    Customize systemwide resources including printers, date, time, power options, and other Control Panel resources.
    Create and manage local user accounts and groups.
    Stop and start system services which are not started by default.

Power Users do not have permission to add themselves to the Administrators group. Power Users do not have access to the data of other users on an NTFS volume, unless those users grant them permission.
Avatar of Itzik Hornstein

ASKER

domain
see above. if however this isnt suitable then  you can add the user to the local admin group. this however has its pros and cons, but ultimatley it depends on how much you wish to lock the users down
ASKER CERTIFIED SOLUTION
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It can only be done for known software. That should mean, you can alow non-admins to install certain defined software on demand. For random software, you will need a third party solution like beyondtrust's powerbroker.
PS: the power users group does not work any more since vista.