Allow domain user to install software on machine

sio2y
sio2y used Ask the Experts™
on
Hi,

We have a web designer who needs to be able to install software and updates on her own machine. She is an admin on the machine and we thought adding her to the power users group would do the trick but it didn't help. The box is Server 2003 and the machine is w7.

What can we do to resolve this without giving her full admin rights?

Thanks.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Senior Solution Architect
Most Valuable Expert 2015
Top Expert 2015
Commented:
You cannot install software on a machine if you are not an administrator. There is 3rd software out there that extends your Group Policy which can allow for Whitelisting of specific applications.

A product that I have used is Desktop Authority or Privilege Authority.
http://privilegeforum.scriptlogic.com/Forum/aff/1/aft/228/afv/topic.aspx

Without that you will not be able to do something like this natively.

Will.
Distinguished Expert 2018

Commented:
lt should not be left out that non-admins may indeed install gpo assigned msi packages on demand.
Distinguished Expert 2017

Commented:
On a server oS, the user has to be a member of local administrator or possibly a server operator group member.
A web designer does not need as a normal scheme install any software, presumably you mean the person needs rights for IIS to register items possibly adding DLLs/applications.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Distinguished Expert 2018
Commented:
A sensible workaround would be to make her a standard user and give her an additional admin password for installations. Then have her sign to use that account only for that purpose, and, if you like to be really strict, monitor the usage of that account by using auditing.

Solutions like what Will has linked or what powerbroker by beyondtrust offers, are administrative overkill for one user in my opinion and costly.
Will SzymkowskiSenior Solution Architect
Most Valuable Expert 2015
Top Expert 2015

Commented:
There are ALWAYS other things the user can do like provide the user with another account that has admin privledges, or event just give the users account admin rights on the server etc...

however based on what the user is trying to accomplish cannot be done natively and requires 3rd party software to accomplish this.

Comes down to a business decision as to what they want to do. Cost/Trust.

Will.

Author

Commented:
Both great options. We will demo the free version of Will's solution and if it works easily $28 would be fine. Otherwise McKnife is correct, one user with a separate login would be ok.

Thanks to both!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial