PC Review


Reply
Thread Tools Rate Thread

Admin rights for intellimirror?

 
 
ExAdmin
Guest
Posts: n/a
 
      12th Dec 2003
Quick questions:

Does there need to be a domain account that has local admin rights on the
client in order to install software through a GPO?

What if there is another policy that disallows non-administrator
installations?

Are there any good low-level documents out there as far as how GPO's are
applied?

I'm focusing on security aspects & GPO administration.

Thanks,
Daniel


 
Reply With Quote
 
 
 
 
Vsevolod Titov [MSFT]
Guest
Posts: n/a
 
      12th Dec 2003
If application is published as MSI package, then user doesn't have to have
admin rights in order to install this application from Add/Remove Programs
snap-in. However .zap packages are executed in user account, so you won't be
able to use .zap distribution that requires admin rights with non-admin
users.

Some high-level and low-level documents about Group Policy are referenced
from the main Group Policy page:

http://www.microsoft.com/windowsserv...y/default.mspx

--
V.T.
This posting is provided "AS IS" with no warranties, and confers no rights.

"ExAdmin" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Quick questions:
>
> Does there need to be a domain account that has local admin rights on the
> client in order to install software through a GPO?
>
> What if there is another policy that disallows non-administrator
> installations?
>
> Are there any good low-level documents out there as far as how GPO's are
> applied?
>
> I'm focusing on security aspects & GPO administration.
>
> Thanks,
> Daniel
>
>



 
Reply With Quote
 
Buz [MSFT]
Guest
Posts: n/a
 
      15th Dec 2003
Here is some more GPO info:

308194 HOW TO: How to Create Organizational Units in a Windows 2000 Domain
http://support.microsoft.com/?id=308194

231289 Using Group Policy Objects to Hide Specified Drives in My Computer
for
http://support.microsoft.com/?id=231289

220019 HOW TO: Set User Rights in Windows 2000
http://support.microsoft.com/?id=220019

307882 HOW TO: Use the Group Policy Editor to Manage Local Computer Policy
in
http://support.microsoft.com/?id=307882

320187 HOW TO: Manage Computer Accounts in Active Directory in Windows 2000
http://support.microsoft.com/?id=320187

322176 HOW TO: Administer GPO Properties in Windows 2000
http://support.microsoft.com/?id=322176

227448 Using Secedit.exe to Force Group Policy to Be Applied Again
http://support.microsoft.com/?id=227448


and App publishing:

324750 HOW TO: Assign Software to a Specific Group By Using a Group Policy
in
http://support.microsoft.com/?id=324750

816102 HOW TO: Use Group Policy to Remotely Install Software in Windows
Server
http://support.microsoft.com/?id=816102

321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based
on
http://support.microsoft.com/?id=321713

314953 HOW TO: Use Group Policy to Deploy Windows XP in a Windows 2000-Based
http://support.microsoft.com/?id=314953

314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000
http://support.microsoft.com/?id=314934

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.




"Vsevolod Titov [MSFT]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> If application is published as MSI package, then user doesn't have to have
> admin rights in order to install this application from Add/Remove Programs
> snap-in. However .zap packages are executed in user account, so you won't

be
> able to use .zap distribution that requires admin rights with non-admin
> users.
>
> Some high-level and low-level documents about Group Policy are referenced
> from the main Group Policy page:
>
>

http://www.microsoft.com/windowsserv...y/default.mspx
>
> --
> V.T.
> This posting is provided "AS IS" with no warranties, and confers no

rights.
>
> "ExAdmin" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Quick questions:
> >
> > Does there need to be a domain account that has local admin rights on

the
> > client in order to install software through a GPO?
> >
> > What if there is another policy that disallows non-administrator
> > installations?
> >
> > Are there any good low-level documents out there as far as how GPO's are
> > applied?
> >
> > I'm focusing on security aspects & GPO administration.
> >
> > Thanks,
> > Daniel
> >
> >

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Access2003 users have admin rights, change to mobile user rights f =?Utf-8?B?SmF5IFdlaXNz?= Microsoft Access Security 9 5th Aug 2007 03:38 PM
User with desktop admin rights but not server admin rights =?Utf-8?B?QnJlbnQgSm9obnNvbg==?= Windows XP Security 1 25th Aug 2005 11:26 PM
Full rights on DC without giving Domain Admin rights? dude Microsoft Windows 2000 Active Directory 1 3rd Jun 2004 06:27 PM
Administer Rights for a Domain Controller without full Domian Admin Rights Microsoft Windows 2000 Terminal Server Applications 1 10th Apr 2004 09:29 PM
ensure domain admin always has admin rights to client ? scott Microsoft Windows 2000 1 23rd Oct 2003 06:20 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 05:25 AM.