Server 2016 how do I allow users to load programs on their own Workstations
The server is running Server 2016
Some of the users need to be able to load software on their own machines, I know this is not ideal.
There is a segment of the users that need to be able to evaluate software, the company is willing to accept the risk of allowing them to load software. The company does not want them all to be Domain admins, I'm assuming that there is a security policy somewhere that can be configured to allow the select few to load software on their machines. But I don't know how to do it.
They are all admins on their own local machines
Thanks for the help
Some of the users need to be able to load software on their own machines, I know this is not ideal.
There is a segment of the users that need to be able to evaluate software, the company is willing to accept the risk of allowing them to load software. The company does not want them all to be Domain admins, I'm assuming that there is a security policy somewhere that can be configured to allow the select few to load software on their machines. But I don't know how to do it.
They are all admins on their own local machines
Thanks for the help
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I would recommend that you setup some Isolated network for these users and give them a separate computer to work on. This is a pretty dangerous risk for your employer to take. The monetary cost to get these users the hardware needed is worth the value of the data if it is lost data.
I would get something in writing dissolving yourself of any risk.
I would get something in writing dissolving yourself of any risk.
ASKER
Just what I asked for, thanks for the help
You'll leave some people puzzled if you accept a solution to a problem (need privileges to install software) that you shouldn't even have ("They are all admins on their own local machines") - Any admin may install software.
What's not working / why do you think it's not working? What are the error messages you're getting.
BTW, the SMART way to do this is to REMOVE them from being administrators on their local machines - then give them a SEPARATE LOCAL ACCOUNT that has local admin rights. NO USER ANYWHERE should be running with admin privileges. They should be forced to enter a local admins account to perform administrative tasks. That's SMART security while providing reasonable access to what they need!