User Privilege


I'm looking for a solution to give the user the ability to installing software on ןד computer but do not let it become administrator

Do you have an idea?
Itzik HornsteinAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Is this on a domain or local computer only? You could try adding the person to the power users group  but see below

Basically, Power Users can:

    Run legacy applications, in addition to Windows 2000 or Windows XP Professional certified applications.
    Install programs that do not modify operating system files or install system services.
    Customize systemwide resources including printers, date, time, power options, and other Control Panel resources.
    Create and manage local user accounts and groups.
    Stop and start system services which are not started by default.

Power Users do not have permission to add themselves to the Administrators group. Power Users do not have access to the data of other users on an NTFS volume, unless those users grant them permission.
Itzik HornsteinAuthor Commented:
see above. if however this isnt suitable then  you can add the user to the local admin group. this however has its pros and cons, but ultimatley it depends on how much you wish to lock the users down
Will SzymkowskiSenior Solution ArchitectCommented:
You will need to use third party software to accomplish Applicaiton White-Listing. I would recommend something like Privilege Authority formally Quest but has been purchased by Dell.

You cannot do something like this natively in Active Directory.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It can only be done for known software. That should mean, you can alow non-admins to install certain defined software on demand. For random software, you will need a third party solution like beyondtrust's powerbroker.
PS: the power users group does not work any more since vista.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.