Admin rights for intellimirror?

[ExAdmin]

Quick questions:

Does there need to be a domain account that has local admin rights on the
client in order to install software through a GPO?

What if there is another policy that disallows non-administrator
installations?

Are there any good low-level documents out there as far as how GPO's are
applied?

I'm focusing on security aspects & GPO administration.

Thanks,
Daniel

 

[Vsevolod Titov [MSFT]]

If application is published as MSI package, then user doesn't have to have
admin rights in order to install this application from Add/Remove Programs
snap-in. However .zap packages are executed in user account, so you won't be
able to use .zap distribution that requires admin rights with non-admin
users.

Some high-level and low-level documents about Group Policy are referenced
from the main Group Policy page:

http://www.microsoft.com/windowsserver2003/technologies/management/grouppolicy/default.mspx

 

[Buz [MSFT]]

Here is some more GPO info:

308194 HOW TO: How to Create Organizational Units in a Windows 2000 Domain
http://support.microsoft.com/?id=308194

231289 Using Group Policy Objects to Hide Specified Drives in My Computer
for
http://support.microsoft.com/?id=231289

220019 HOW TO: Set User Rights in Windows 2000
http://support.microsoft.com/?id=220019

307882 HOW TO: Use the Group Policy Editor to Manage Local Computer Policy
in
http://support.microsoft.com/?id=307882

320187 HOW TO: Manage Computer Accounts in Active Directory in Windows 2000
http://support.microsoft.com/?id=320187

322176 HOW TO: Administer GPO Properties in Windows 2000
http://support.microsoft.com/?id=322176

227448 Using Secedit.exe to Force Group Policy to Be Applied Again
http://support.microsoft.com/?id=227448


and App publishing:

324750 HOW TO: Assign Software to a Specific Group By Using a Group Policy
in
http://support.microsoft.com/?id=324750

816102 HOW TO: Use Group Policy to Remotely Install Software in Windows
Server
http://support.microsoft.com/?id=816102

321713 HOW TO: Use Group Policy to Set Automatic Installation Options Based
on
http://support.microsoft.com/?id=321713

314953 HOW TO: Use Group Policy to Deploy Windows XP in a Windows 2000-Based
http://support.microsoft.com/?id=314953

314934 HOW TO: Use Group Policy to Remotely Install Software in Windows 2000
http://support.microsoft.com/?id=314934

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.