Re: domain administrator user to installed software on workstations?



Hi,

If you follow security guides and recommendations you should _never_ logon
to any client computer with domain administrator account.

Best practice is to create new account in domain (ordinary user account that
is not member of Administrators or Domain Administrators groups...). Now add
this account to _local_ administrator group on the computer where you need
to install the software. Once this is done logon using this account and
install the software.

If you want to add this account to multiple computers local administrator
group you can use this script as _startup_ script (not logon script).

net group administrators domain\admin-user /add

where:
domain is name of your domain
admin-user is user that you created in AD that will have local administrator
permissions

--
Mike
Microsoft MVP - Windows Security


"server 2000 Group policy for windows xp"
<server2000Grouppolicyforwindowsxp@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:302FE945-1BE8-4030-B3BE-FF42B41959D3@xxxxxxxxxxxxxxxx
Server 2000, 30 windows xp and windows 2000 workstations.
The best way of installing software is...with a domain admin account or
local domain admin , or do i need to created a special domain user so i
can
installed the software on the workstaion ,,OR please give advices how i
can
do this installation

On this environments.

Many thanks for your time and help.



.