Active Directory PC Lock down

From: Dinesh (dinesh.nagal@med.ge.com)
Date: 06/17/02


From: "Dinesh" <dinesh.nagal@med.ge.com>
Date: Mon, 17 Jun 2002 09:52:09 -0700


Hi All,

We are going to implement Active directory model in our
company. Right now every user is having the priveleges of
Local Admin to thier respective Pc's. But after
implementing Active directory Model, We are going to
restrict the users of their respective Pc's from becoming
thier local Admins.

But now we are having concerns. As we are developing MSI
packages for application installation using wise Package
studio 3.12, We are going to publish these packages on our
GE-Medical website. In this type of setup, If any user
want to install any application(package), he need to visit
to our package list page of our website & need to double
click on that particular package to install that
application on his box.

But as now the user is not having the local admin rights
of his Pc, How he is going to install that package in his
PC.

SMS 2.0 is having by default a service Account, which is
by default taking care of such type of deployments. But we
have SMS that is covering only 60% pc's. So for remaining
40% pc's we want to use this webpage of our site to deploy
packages on thier boxes.

Hope u understand my concern.

Thanks

Dinesh



Relevant Pages

  • Re: Elevating user rights to install software
    ... I was trying to find a way that would elevate at install time. ... Use a security GPO to include the specified user in the local admin ... Rollout package. ... And, the user needs Administrator ...
    (microsoft.public.sms.swdist)
  • Re: Elevating user rights to install software
    ... I was trying to find a way that would elevate at install time. ... Use a security GPO to include the specified user in the local admin ... Rollout package. ... And, the user needs Administrator ...
    (microsoft.public.sms.swdist)
  • Re: Elevating user rights to install software
    ... Most times the administrator right is needed because the application being ... add the necessary ACLs, install, then remove the ACLs. ... Use a security GPO to include the specified user in the local admin ... Rollout package. ...
    (microsoft.public.sms.swdist)
  • Errors applying kernel patch 118833-36
    ... install of Solaris 10 11/06. ... However, once the package list is done, I see a worrisome message: ... Below is the complete console output of the patch run. ... Changes for package SUNWnfsskr will not be applied to the system. ...
    (SunManagers)
  • Re: media player 10 setup issues
    ... Finished building install list. ... Package 'MPPRE' is version '10.0.0.3802'. ... Install for Exception pack ...
    (microsoft.public.windowsmedia)

Loading