can you allow users to install software with givibg admin rights

[jono261970]

Hi,

A user on our network wants to be able to install things like the google toolbar for instance. I don't want to give this person admin rights - is there a way around this; and do they need to have a local account on the machine?

Workstations are win xp and the server is win 2k AD.

cheers,

jono


A good fortune may forbode a bad luck, which may in turn disguise a good fortune.

 

[neutec]

Give the user super user rights on the local machine. He then will be able to install software on that machine and only that machine.

MCSE CCNA

 

[ashpp]

power users can install software

 

[neutec]

Sorry about he error,
Ashpp is correct. I meant Power User


MCSE CCNA

 

[jono261970]

Cheers guys.

jono


A good fortune may forbode a bad luck, which may in turn disguise a good fortune.

 

[jono261970]

Hello,

I logged on locally to the computer in question and made the user a member of the power user group. However, she still gets told she is not allowed to install the google toolbar.

I have looked on the win 2k server and there isn't a power user group so when she logs on to the domain and not the local computer isn't she a member of just the user group?


cheers,

jono



A good fortune may forbode a bad luck, which may in turn disguise a good fortune.

 

[Flypuck]

Hi Jono,

What the chaps were refering to inregards to Superuser is a local user which has been added to the local admin group on the local PC.

I'm lazy so wil give you quick and easy way.

What you will need to do is log on to the local PC as either a) Domain Admin or b) local admin.

Then you will need to go to 'manage'. You can get to this by right click on 'My Computer' and select from menu there.

Go to /local users and groups/groups/administrators and add the user from your domain to the local administrator group.

Dependant on how you logged on will determine whether or not the PC will query you for a user name and password to connect to the Domain to add your user from the domain that needs to install stuff.

Please be aware that you are now allowing a user full control over their PC which can be a real pain.

This isn't the best method but it will work. It is best to create a global group ie localPCadmin that is added to the local admin group of the PC, so you can assign users into that global group who are assigned to the local pc admin group. That way you can give temporary super user access from your PC and then take them off again when they are finished. This does have one major flaw as it will allow the user local admin rights to all other PC's, but it is also controllable. Another method would be to give everyone superuser rights and then restrict them down via policy instead, more complex to setup but very effective.

Cheers
Flypuck.

 

[FrauW]

If you have a domain, it is better not to give users rights on the local machine but rather use the domain security policies to give them freedoms (specifically User Rights Assignments and any extra group policies that you have assigned to any organisational groups). Domain security policy settings override local security policy settings. G'luck!

 

[neutec]

You need to us there domain account name on the local machine. Open computer managment snapin, select the computer you want to add her to. Under local users and groups double click power users, then click add, click the advance button, then click find now. You should see her name in the lizt of domain users, select her name. Just make sure ist the domain accout and you should be fine. This way when she logs on to the domain she will have access to the domain as normal and have power user rights.

MCSE CCNA