Re: installing applications

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 09/02/04 

Date: Thu, 02 Sep 2004 21:56:19 GMT

You could use restricted groups by placing domain users in the power users group for
your 140 computers by placing the computers in an OU and then create a GPO for that
OU with restricted groups configured to include domain users [or a global group of
users you create] to the power users group. It could also be done with a Group Policy
start up script using the net localgroup [ net localgroup "power users"
"mydomian\domain users" /add ] command for an OU. Restricted groups works well but
may remove all existing users already in a group in which case a startup script would
work fine. If you use restricted groups, you will not be able to browse for it since
it does not exist at the domain level just enter power users as the group name. See
the links below on restricted groups. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;228496
http://support.microsoft.com/default.aspx?scid=kb;en-us;810076
http://support.microsoft.com/default.aspx?scid=kb;EN-US;322241

"Brantley Allen" <brantley@pounds-tx.com> wrote in message
news:10je74v27daidd8@corp.supernews.com...
>I know about the publishing with GP. I still have to get my developers to properly
>build the .msi files to install for everybody, instead of the installer.
>
> Ok, so I can make them Power Users. How do I do this on 140 systems without going
> to each one and doing it manually?
>
> Brantley
>
>
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
> news:GppZc.106624$mD.88627@attbi_s02...
>> You could try making them power users which while more powerful than a regular
>> users is still a long way from an administrator. Regular users by design are very
>> limited in to what they can install on computers.
>>
>> If these are .msi applications or can be converted to .msi applications you can
>> use Group Policy to publish or assign the applications to users or computers. --
>> Steve
>>
>>
>> tp://www.microsoft.com/windows2000/techinfo/planning/management/swinstall.asp --
>> how to use Group Policy to assign/publish applications
>>
>> "news.birch.net" <brantley@pounds-tx.com> wrote in message
>> news:10jc49cfh01hjde@corp.supernews.com...
>>>I want a group of supervisors to be able to install applications on our AD
>>>computers. Currenlty, only Domain Admins and Local Administrators have this
>>>ability.
>>>
>>> How can I set a group to install applications without adding them to the Local
>>> Admininstrators groups of all my systems?
>>>
>>> Brantley Allen
>>> System Administrator
>>> Pounds Photographic Labs
>>>
>>
>>
>
>

Relevant Pages

  • Re: Create Shared Folders With Domain User Rights
    ... automatically adds (For example all members in Domain Users to the local ... > computers. ... > local group " Power users " But I want a centralized Soloution. ...
    (microsoft.public.win2000.active_directory)
  • Re: Power User Setting Not Saved
    ... I've added the local user to the Power Users ... However Group Policy Restricted Groups ... can be used to manage membership of the power users group which seems to be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power User Setting Not Saved
    ... There is no power users group in Active Directory - it is only available as ... However Group Policy Restricted Groups ... can be used to manage membership of the power users group which seems to be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Permission On Windows Xp
    ... one way of doing it is use Restricted Groups in a GPO. ... Choose new group, browse to the domains' Local Power Users Group and add it to the local XP machine's groups, and choose Power Users ... browse to the ldomain's Local Admin Users Group and add it to the local XP machine's groups and choose Administrators ... In the XP's computer Management console, look at the Local Power Users and Administrators Groups and see if the Domain\Local Power Users Group is added to the machine's local Power Users group and the Local Admin Users Group is added to the machine';s local Administrators group. ...
    (microsoft.public.windows.server.general)
  • Re: Permission On Windows Xp
    ... Restricted Groups ... create a group and call it Local Power Users Group ... Create another group and call it Local Admin Users Group ... Administrators Groups and see if the Domain\Local Power Users Group is ...
    (microsoft.public.windows.server.general)