How to give install rights to domain users on the local machine

[Bartosz Wegrzyn]

Hi,

I would like some domain users to be able to install software.
What is the best way to accomplish this (most secure).

Server 2000
Clients 2000

Thanks

Bart,

 

[Danny Sanders]

Add their domain login account to the local admin group of their computer.


hth
DDS W 2k MVP MCSE

 

[Bruce Chambers]

Add each user's domain account to the local administrators group
on his/her workstation. Be aware, however, that by doing so you've
effectively compromised the security of those workstations, and
therefore your entire network.

The "best" way would be not do it, at all. The second best way
would be to do it, but ensure that those machines affected are not
part of your production network.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Anthony Yates]

You could:
- make them local admin - not really desirable
- make them Power User - can install certain types of application that do
not affect the OS
- use Group Policy to assign the application and install with elevated
privileges (haven't tried it as all our software is published, not assigned,
but that's what it is supposed to do)
Anthony

 

[Bartosz Wegrzyn]

Thanks to everyone.
I will try to do somethings between those two.

Bart,