domain user does not have rights to install apps

[DarrPalmer]

W2K Pro boxes when logged on by domain user do not allow apps to be installed. Only as Domain Admin or local machine admin can you install apps.

I do not want to give admin rights to users, I do want to allow domain users to be able to load apps.

Any truth to a switch that can be added (somewhere?) ie /local ?

Tomorrow is last day on job and would LOVE to deliver solution.

Thanks in advance

 

[tlcscousin]

If I remember correctly there is an option to always install with elevated permissions.
Letting users install apps is a good way to bu**er up the workstations and get viruses.

 

[DarrPalmer]

Yes, I agree with the elevated permissions problem. However these machines are for the faculty and administrative staff at a private school.

My real dilemma is that one of the faculty members husbands led the SA thru the steps of making a one line change with the following switch being inserted after the user or possibly the machine name ie. BeH@school.local (/local) without the parentheses and possibly additional characters (The SA is a nice person, but is just learning Microsoft, and does not remember where, or exactly what the members husband had him type in.)

The users logon is not a member of any admin group per AD that I can see. The laptop works flawlessly and allows them to install apps while logged in as the domain user.

Unfortunately, I cannot get access to the laptop to research it. The info is being held hostage in an attempt to win the schools business.

Finally, the new Head of School has a new laptop and wants hers to work like the other BeH.

Although today will probably be my last day with my current employer, I would like to leave with this problem resolved.


Thanks in advance for any suggestions that might work.

DarrPalmer

 

[koquito]

Go to Windows 2000 help-->index and type Net LocalGroup, is a command line utility, probably he used that to add that user to the admin local group so she could be able to install apps.
Try adding users to the power users group, and then try installing the apps, also you can add them to the local admin or power users group, applying policies, this way preventing of doing serious damages or changes.
Good luck in your last day!! A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!