Re: Question for WinInstall customers

From: Andy (andrew_ihatespamtaylor_mcse@yahooihatespam.com)
Date: 07/09/02 

From: "Andy" <andrew_ihatespamtaylor_mcse@yahooihatespam.com>
Date: Mon, 8 Jul 2002 18:02:09 -0500

[Cross-posting my own thread from the Win2000 security newsgroup.]

"Bill Stewart" <bstewart@iname.no_spam.com> wrote in message
news:u8Ah5QEJCHA.668@tkmsftngp09...
> "Andy" <andrew_taylor_ihatespammcse@yahooihatespam.com> wrote in message
> news:ujRxbpvICHA.1916@tkmsftngp09...
>
> > It seems strange to me that the appliation requires Domain Admins
membership
> > to distribute desktop software. As long as it has the appropriate
access on
> > the PCs where it will be installing software, I don't understand why it
> > should matter what group object is being used. However, from what I'm
hearing
> > from the vendor, it appears that they are relying on several default
> > permissions and rights that are assigned by default to the Domain Admins
> > group object.
>
> I agree with you. It seems that all their software needs is to be a member
of a
> group that is a member of your workstations' Administrators local groups.
I
> would try creating a global group in your OU that contains accounts that
should
> be a member of the Administrators group on the workstations, and add the
> software's account to that group. The question to ask is, "Why does the
account
> have to be a member of Domain Admins if it's in the Administrators group
on the
> workstations?"
>
>

Relevant Pages

  • Re: "Edit Users..." Menu Item Disabled in Telephony Management Sna
    ... To make it clear i used account that is member of domain admins and group ... I set up also the account (already member of domain admins and trough this ... Running "tapicfg show" revealed that I had no Active Directory TAPI ...
    (microsoft.public.win32.programmer.tapi)
  • Re: Listing user privileges
    ... So the service works is Domain Admin, running on a member, ... Domain Admins group resolves the issue, and I'm suspecting (but not yet ... confirmed) that being a member of the Administrators group for the domain ... are the privilege differences between those two groups, ...
    (microsoft.public.windows.server.security)
  • Re: Listing user privileges
    ... that Domain Admins (therefore AD controller ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)
  • Re: Listing user privileges
    ... Administrators group of domain is used only on the DCs. ... Domain Admins is member in Administrators group of each ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)
  • Re: Windows Service - Event Log
    ... I didn't say the Administrator account. ... Administrators group on the local machine." ... I didn't advocate using a member of the Administrator's group; ...
    (microsoft.public.dotnet.languages.csharp)
Quantcast