Re: domain administrator user to installed software on workstations?

Hi,

Correction. The script would look like

net localgroup Administrators domain\admin-user /add

--
Mike
Microsoft MVP - Windows Security

"Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> wrote in message
news:uMJGFjzXGHA.3740@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

If you follow security guides and recommendations you should _never_ logon
to any client computer with domain administrator account.

Best practice is to create new account in domain (ordinary user account
that is not member of Administrators or Domain Administrators groups...).
Now add this account to _local_ administrator group on the computer where
you need to install the software. Once this is done logon using this
account and install the software.

If you want to add this account to multiple computers local administrator
group you can use this script as _startup_ script (not logon script).

net group administrators domain\admin-user /add

where:
domain is name of your domain
admin-user is user that you created in AD that will have local
administrator permissions

--
Mike
Microsoft MVP - Windows Security


"server 2000 Group policy for windows xp"
<server2000Grouppolicyforwindowsxp@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:302FE945-1BE8-4030-B3BE-FF42B41959D3@xxxxxxxxxxxxxxxx
Server 2000, 30 windows xp and windows 2000 workstations.
The best way of installing software is...with a domain admin account or
local domain admin , or do i need to created a special domain user so i
can
installed the software on the workstaion ,,OR please give advices how i
can
do this installation

On this environments.

Many thanks for your time and help.





.

Relevant Pages

  • Re: User type
    ... Domain Administrators group (actually you only leave it in default group -- ... Add this computer account to new domain group called e.g. ... After you have this account and group created you can write a short script ... group where your users who need to be local admins are located. ...
    (microsoft.public.windows.server.setup)
  • Re: Installing a program from the Owner profile?
    ... If the four users are administrator ones you should be able to install ... > actually, that didnt work. ... > account and creating the new profile. ... > from an administrators account." ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: cant install program using domain account
    ... Make sure that your domain user account is still in the local administrators group on ... you are a member by group membership such as "domain users". ... When I try to install a particular program, ...
    (microsoft.public.win2000.security)
  • Re: Installing a program from the Owner profile?
    ... it seemed like it would have worked but it didnt. ... i have Home edition and i did what you said, going to the administrators ... account and creating the new profile. ... > this new account and install the software. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Programs wont work in Limited User Accounts
    ... users Administrators rights ... change, the shortcut would work for the other useras normal, but it ... the asp.net is windows own network account. ... >seemed to double install some start up programs. ...
    (microsoft.public.windowsxp.general)