Re: Local install permission

Hello reptil,

If you really will make them local admins, you can use Restricted Groups in a GPO.
http://www.frickelsoft.net/blog/?p=13

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

But i would prefer to use Software distribution policy to install software fro users and not make them local administrator.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

That means I must logon on every computer in LAN. Is it possible to
make with GPO or some script thnx

On Wed, 19 Dec 2007 04:53:48 -0800 (PST), jwgoerlich@xxxxxxxxx wrote:

Open Computer Management, open Local Users and Groups, Groups. Add
the person's domain user account to the local Administrators group.

J Wolfgang Goerlich

On Dec 19, 3:31 am, reptil <c.rep...@xxxxxxxxx> wrote:

How to enable admin options to domain user on local machine. I need
to give permissions domain user so they can install software on
theres machines.

thnx



.

Relevant Pages

  • Re: Want to add users to their local Admin group
    ... > Above assumes adding user to Administrators group on more than one PC. ... > operation on more than on PC, I think we should use GPO here. ... Restricted groups would be great if we could ... PC-1 with user Joe, PC-2 with user Mary, and PC-3 with user Peter. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted group functionality
    ... GPO that affects the computer side of things you would have to make sure ... that the computer account objectin question are located in an OU (well, ... we are targeting the administrator group. ... making use of the Restricted Groups can be a bit more difficult than ...
    (microsoft.public.windows.group_policy)
  • RE: adding domain users to power users
    ... Create a GPO that uses restricted groups. ... Using the Group Policy Management ... Windows Settings, Security Settings, Restricted Groups. ... Users) Then open that and add whoever you want to be power users on domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2003 AD
    ... There is something called 'Restricted Groups' GPO that might help you. ... to certain areas of the registry or to some folder. ... > E-Backoffice require that the user be a member of the local administrators ...
    (microsoft.public.win2000.group_policy)
  • Re: Local Admin
    ... with the Out-of-the-Box configuration the use of this GPO will flush the ... the group that is your focus in the local Administrators group. ... WIN XP Pro system in my environment. ... > You can do this with the Restricted Groups function of Group Policy: ...
    (microsoft.public.windows.server.active_directory)