domain administrator user to installed software on workstations?

[Guest]

Server 2000, 30 windows xp and windows 2000 workstations.
The best way of installing software is...with a domain admin account or
local domain admin , or do i need to created a special domain user so i can
installed the software on the workstaion ,,OR please give advices how i can
do this installation

On this environments.

Many thanks for your time and help.

 

[Miha Pihler [MVP]]

Hi,

If you follow security guides and recommendations you should _never_ logon
to any client computer with domain administrator account.

Best practice is to create new account in domain (ordinary user account that
is not member of Administrators or Domain Administrators groups...). Now add
this account to _local_ administrator group on the computer where you need
to install the software. Once this is done logon using this account and
install the software.

If you want to add this account to multiple computers local administrator
group you can use this script as _startup_ script (not logon script).

net group administrators domain\admin-user /add

where:
domain is name of your domain
admin-user is user that you created in AD that will have local administrator
permissions

--
Mike
Microsoft MVP - Windows Security


"server 2000 Group policy for windows xp"

 

[Miha Pihler [MVP]]

Hi,

Correction. The script would look like

net localgroup Administrators domain\admin-user /add

 

[Roger Abell [MVP]]

This is not intended to contest what Mike has stated in his reply.

Ideally you would use AD to assign the software package to
the machines with Group Policy. The software would then be
installed my the system automaticaly.


"server 2000 Group policy for windows xp"

 

[Guest]

Thanks so much for your help and time ,

all this make more sense now..

Roger and Mike again thanks so lot .


Ron.