Admin rights but no install?

[zodiaczz]

Hello is there a way in Group policy to allow people to have administrator rights to their local computers but also disable the ability to install new software?

Thanks

 

[monsterjta]

What are you trying to do? Of course, a local administrator will have rights to install software. What kind of rights would satisfy your deployment?

Even if you had some sort of group policy in place, if a user were to logon outside of the domain they would have the admin rights to install software.

Hope This Helps,

Good Luck!

 

[58sniper]

If you're using a GPO pushed out to machines to deploy, then only the computer itself needs rights. Typically, that's READ rights (sharing and NTFS) to the share point that holds the app.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt