>H
I have a problem in that I need to allow certain users to install software on various workstations in a AD Domain
The workstations are 2k and XP
Is there a policy for this in AD, as I don't want to allow these users to be either domain admins or local administrators
I've been looking into this for a couple of days now and have come up blank. It's driving me mad
Help on this greatly appreciate
Nik Rush
>
Nik,
If you are looking to allow clients to install specific software in an AD environment and do not want to allow the users Admin right on the system you can
use a Group Policy to accomplish this. You can either assign the software to a particular group of computers in an Organizations unit and the next time
they boot the software should install automatically.
You can also publish this software to a specific set of users, again via a GPO. Users will then have the option to go to Add Remove Programs and then
be able to select the programs that you allow them to install from the "Add New Programs" option.
Obviously i am over simplifying this process but I can provide you with some direction on what to look at to get this running:
816102 HOW TO: Use Group Policy to Remotely Install Software in Windows Server
http://support.microsoft.com/?id=816102
314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000
http://support.microsoft.com/?id=314934
302430 HOW TO: Assign Software to a Specific Group By Using a Group Policy
http://support.microsoft.com/?id=302430
324750 HOW TO: Assign Software to a Specific Group By Using a Group Policy in
http://support.microsoft.com/?id=324750
I am a networking engineer so i can not speak in depth on this but if you have additional questions, you may want to post to the directory services
newsgroup.
Hope this helps!!!!
T.J. Campana [MSFT]
Microsoft EPS Networking
--
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they originated.