I have a multi part question that will probably end up being quite lengthy, so I apologize for the size. My scenario is: I am finding that since we switched to a new business system, I am CONSTANTLY going from workstation to workstation and repeating non value-added tasks and really need to try to get these things accomplished through Group Policies, if possible. One task for example, almost daily, I am going to different workstations and having to do a "Run As" to install different Active Content apps such as Flash, Java applets, etc(any "safe" active content of course). These are not needed every day by every person, but is still a pain to administer. Sometimes our employees will need to go to a special website from one of our vendors. This vendor's website is safe and requires active content. When they update the server on their end, it then requires our workstations to have the same version or it will not work properly. So currently, every time they update, I have to go to each workstation and either log in as myself, or I can do a "Run As" on IE and this takes care of it until the next time. Can't this be done in Group Policies in the security section? What is the best practice for this? I do know that within IE, in Tools>Advanced Settings> Security section, you can check the checkbox "Allow active content to run in a file from My Computer" but this allows ALL active content to run, which is not recommended by Microsoft. Is there a group policy that allows me to specify and add trusted websites to Internet zones and Intranet zones?
My second scenario is the same as above, but instead of active content, it is with software. For example, we use Lotus Notes as our email app. Within Notes, is a messaging app called "SameTime Connect". Whenever a new employee gets hired, I have to remotely connect to one of our 10 locations and install it for them. I want to select one manager from each location and designate them as a "Power User" and allow them to install little apps like SameTime but I DO NOT want to give them FULL installation rights....only for apps that I approve and allow on our network. How can I allow the managers software installation rights but ONLY to certain applications?
Thanks a million...
Chad
My second scenario is the same as above, but instead of active content, it is with software. For example, we use Lotus Notes as our email app. Within Notes, is a messaging app called "SameTime Connect". Whenever a new employee gets hired, I have to remotely connect to one of our 10 locations and install it for them. I want to select one manager from each location and designate them as a "Power User" and allow them to install little apps like SameTime but I DO NOT want to give them FULL installation rights....only for apps that I approve and allow on our network. How can I allow the managers software installation rights but ONLY to certain applications?
Thanks a million...
Chad