Allow Users to Install software on Local Machine

[mdfi13]

I am trying to allow users to install, if possible, just one specific exe on their local machines, without giving them admin rights locally.

If that is not possible, I would be open to giving everyone local admin or power user rights on a temp basis, but I dont want to touch every computer to do so. Is there a way in AD (Group Policies, maybe) to do this?

Thanks for your help

 

[gmail2]

The best way would be to assign an MSI to the PC's through Group Policy. Once you've assigned the software then the next time the PC starts up it would automatically install the software.

If you wanted to go down the road of giving them local admin rights instead, you could use restricted groups (which are quiet useful anyway). Restricted groups are a way of controlling membership of local groups through group policy. Under Computer Configuration > Windows Settings > Security Settings > Restricted Groups simply create a new "group" named Administrators. Then select who you want to be a member of that group. So you could add in domain users if you wanted everybody to have local admin rights. But bear in mind that this will apply to all PC's that are affected by this GPO. So therefore users will have admin rights to all the PC's affected, not just their own.

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[mdfi13]

Thanks gmail2, but when I created the Restricted Group, it will not apply down to any of my machine. According to gpresult, it is "Filtered Out" under the User Settings and does not show up at all under the Computer Settings.

I have given Authenticated Users and Domain Computers access to this GPO.

Any other ideas?

 

[gmail2]

Restricted groups are only configured under Computer Settings - as it applied to the local group on the PC. what is it exactly that's "filtered out"? A policy? If it's filtered out, it probably means that you've got a WMI filtering, or it's out of the scope of the computer. Where did you configure the restricted group (ie, at what level - site, OU, domain ... ?)

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau